396525 matches found
CVE-2026-42616
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...
CVE-2026-106062
A heap-based buffer overflow was found in GIMP\u2019s DirectDraw Surfa...
CVE-2026-46569
A heap buffer overflow exists in NTFS-3G before version 2026.7.7 within the ntfs_ib_copy_tail() function located in libntfs-3g/index.c . A local attacker can exploit this by supplying a specially crafted NTFS filesystem image. Triggering the overflow via actions like extending a directory (e.g., ...
PT-2026-107382
Name of the Vulnerable Software and Affected Versions ASUS router affected versions not specified Description A stack-based buffer overflow occurs in the router modules. This issue allows an authenticated nearby user to execute arbitrary code by uploading a crafted configuration file that exceeds...
PT-2026-107546
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description A heap buffer overflow occurs in the EXR decoder when processing a specially crafted EXR image, which leads to a process crash. A heap buffer overflow is a condition where a program writes mor...
PT-2026-107557
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, resulting in a server crash. A...
CVE-2026-76464: Improper Restriction of Operations within the Bounds of a Memory Buffer
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-77214: Out-of-bounds Read
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Remote Desktop Client for Windows client involves an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Remote Desktop Client for Windows client involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Populate on Demand (PoD) mechanism in Xen hypervisors allows a hacker to trigger a service failure.
The vulnerability of the Populate on Demand PoD mechanism in Xen hypervisors lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Graphics Component component in the Microsoft Office software suite allows a hacker to execute arbitrary code.
The vulnerability of the Graphics Component component in the Microsoft Office software suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Work Folders service in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Work Folders service in Windows operating systems is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-106292
Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allow...
Debian: CVE-2026-42617: ntfs-3g -- security update
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...
vim security update
8.0.1763-32.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-32 - RHEL-271024 vim: vim: Ex command injection via crafted filename in signjump 2:8.0.1763-32 - RHEL-257017 CVE-2026-73073 arbitrary Ex...
ALSA-2026:77690 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...
The vulnerability of the Microsoft Remote Desktop Client for Windows client involves an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Remote Desktop Client for Windows client involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...