Lucene search
+L

260635 matches found

RedhatCVE
RedhatCVE
added 2026/08/19 6:19 p.m.8 views

CVE-2026-74559

A flaw was found in the Linux kernel's AFXDP eXpress Data Path networking component. This vulnerability, located in the xskbuildskb function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain...

5.5CVSS5.4AI score0.00166EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/19 6:18 p.m.5 views

CVE-2026-72478

A flaw was found in the Linux kernel's NTFS3 file system driver. The rungethighestvcn function, which processes NTFS mapping-pairs buffers, does not properly validate buffer boundaries. A crafted NTFS log file, when mounted, can cause the system to read beyond its allocated memory. This memory...

8.4CVSS5.7AI score0.00154EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/19 6:17 p.m.7 views

CVE-2026-63633

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

7.7CVSS0.00465EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 6:17 p.m.3 views

DEBIAN-CVE-2026-63633

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

7.7CVSS5.7AI score0.00465EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 6:16 p.m.7 views

CVE-2026-55194

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

8.7CVSS0.00626EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/19 6:16 p.m.5 views

CVE-2026-55191

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculate the intermediate YUV444 allocation size in libfreerdp/codec/h264.c with 32-bit multiplication in avc444ensurebuffer. A malicious R...

8.7CVSS0.00626EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/19 6:16 p.m.6 views

CVE-2026-55193

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpcbind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise...

8.7CVSS0.00626EPSS
SaveExploits0References4
Circl
Circl
added 2026/08/19 6:16 p.m.9 views

CVE-2026-61326

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

8.5CVSS4.8AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 6:02 p.m.28 views

CVE-2026-19234

IBM Power Systems firmware (FW1120.00, FW1110.00–.30, FW1060.00–.80) suffers CWE-121 stack-based buffer overflow in the host boot image validation path. An attacker with service processor access can inject a malicious code update image, achieving arbitrary host code execution with HIGH confidenti...

8.2CVSS5.7AI score0.00123EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/19 6:02 p.m.8 views

CVE-2026-19234 Power System Buffer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image,...

8.2CVSS5.7AI score0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 6:00 p.m.32 views

CVE-2026-63633 FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

7.7CVSS0.00465EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/19 6:00 p.m.8 views

CVE-2026-63633

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

7.7CVSS5.7AI score0.00465EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/08/19 5:50 p.m.18 views

CVE-2026-55194

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

8.7CVSS6AI score0.00626EPSS
SaveExploits0
OSV
OSV
added 2026/08/19 5:50 p.m.7 views

CVE-2026-55194 FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

8.7CVSS6.1AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/19 5:50 p.m.5 views

CVE-2026-74473

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An incorrect buffer length check in the routeshortcircuit function, specifically when using pskbmaypull, can lead to reading beyond the allocated buffer length. This occurs when processing IP headers in non-linear...

9.8CVSS5.6AI score0.00514EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/19 5:50 p.m.6 views

CVE-2026-74458

A flaw was found in the Kvaser USB CAN driver kvaserusbleaf in the Linux kernel. This vulnerability occurs due to insufficient validation of received command lengths from a USB buffer. A malicious or malformed command shorter than the expected header length, or one that exceeds the destination...

5.5CVSS5.6AI score0.00177EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 5:46 p.m.8 views

CVE-2026-55193 FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpcbind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise...

8.7CVSS6.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/19 5:46 p.m.33 views

CVE-2026-55193 FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpcbind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise...

8.7CVSS0.00626EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/08/19 5:46 p.m.19 views

CVE-2026-55193

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpcbind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise...

8.7CVSS6AI score0.00626EPSS
SaveExploits0
CVE
CVE
added 2026/08/19 5:46 p.m.41 views

CVE-2026-55193

FreeRDP clients using TS Gateway assign a server-controlled max_xmit_frag value (up to 65535) to rpc->max_recv_frag in rpc_bind.c without capping it to the 4088-byte ReceiveFragment buffer, so rpc_channel_read in rpc.c writes up to 65535 bytes, overflowing by up to 61447 attacker-controlled by...

8.7CVSS5.9AI score0.00626EPSS
SaveExploits0References4
Rows per page
Query Builder