EUVD-2026-24217

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers /api/state, /api/restore, and /api/history-svg that process incoming requests by accumulating the entire request body into a...

CVE-2026-40481

monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public Stripe webhook endpoint buffers the entire request body into memory before validating the Stripe signature. A remote unauthenticated attacker can send oversized POST payloads to cause uncontrolled...

CVE-2026-40481

monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public Stripe webhook endpoint buffers the entire request body into memory before validating the Stripe signature. A remote unauthenticated attacker can send oversized POST payloads to cause uncontrolled...

cpython: Excessive read buffering DoS in http.client

A flaw was found in the http.client module in the Python standard library. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This issue allows a malicious server to cause the client to read large amounts of data into...

CVE-2026-32216

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

The vulnerability of the Redirected Drive Buffering System (RDBS) allows a perpetrator to cause a service failure.

The vulnerability of the Redirected Drive Buffering System RDBS is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-22599

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

CVE-2026-32216

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

CVE-2026-32216 Windows Redirected Drive Buffering System Denial of Service Vulnerability

...

CVE-2026-32216

CVE-2026-32216 is a Windows Redirected Drive Buffering vulnerability caused by a null pointer dereference, enabling an authorized, local attacker to perform a Denial of Service. Affected software is Windows (Redirected Drive Buffering component); impact is local DoS as described in sources. Micro...

CVE-2026-32216 Windows Redirected Drive Buffering System Denial of Service Vulnerability

...

CVE-2026-32216

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

Windows Redirected Drive Buffering System Denial of Service Vulnerability

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

Microsoft Windows Redirected Drive Buffering 代码问题漏洞

Microsoft Windows Redirected Drive Buffering is a core network file system component of the American company Microsoft, providing support and buffering management for various network micro-redirector drivers, such as the SMB protocol. There are code-related vulnerabilities in Microsoft Windows...

CVE-2026-32216: NULL Pointer Dereference

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

PT-2026-32859

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to cause a local denial of service, which can lead to system crashes or connection failures...

CVE-2026-35626

OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks. Attackers can send large or malicious webhook requests to exhaust server resources without authentication by bypassi...

openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

A flaw was found in OpenSSL. This vulnerability involves an out-of-bounds write in the line-buffering BIO filter, which can lead to memory corruption. While exploitation is unlikely to be under direct attacker control, a successful attack could cause an application to crash, resulting in a Denial...

SUSE CVE-2026-31932

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...

SUSE CVE-2026-31937

Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15...