4645 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-68257
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation totalcwsrsize was computed in 32-bit before being used as a BO/SVM allocation size. With large...
OESA-2026-3286 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: When decoding an OpenEX...
OESA-2026-3284 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: When decoding an OpenEX...
CVE-2026-55980
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
CVE-2026-55980 Denial-of-service vulnerability in CatchPulse
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
EUVD-2026-53843
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
CVE-2026-55980
CVE-2026-55980 is a DoS vulnerability in CatchPulse. The available documents indicate a stack buffer overrun as the root cause leading to a denial-of-service condition. Affected software is CatchPulse; details on exact versions, components, or exploit vectors are not provided in the documents. Th...
CVE-2026-55980 Denial-of-service vulnerability in CatchPulse
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
CVE-2026-55980
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the __ioam6_fillTraceData() and ioam6_validateTraceHdr() functions in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ioam6fillTraceData and ioam6validateTraceHdr functions in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2026-3056)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
K000162790: Linux Kernel vulnerability CVE-2026-53209
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
EUVD-2026-51340
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the f_audio_out_ep_complete() function in the drivers/usb/gadget/function/f_uac1_legacy.c file of the Linux operating system’s gadget driver framework allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to the execution of operations outside the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploitation of this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted...