CVE-2026-44179

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...

CVE-2026-47235

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

CVE-2026-116776

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize in USB Test/src/driveinfo.cpp trusts DISKGEOMETRY.BytesPerSector returned by IOCTLDISKGETDRIVEGEOMETRY without checking wheth...

CVE-2026-93523

A heap buffer overflow vulnerability exists in X.Org X Server (versions before 21.1.15) and XWayland (versions before 24.1.14) within the XInput2 component. The flaw is triggered by a XIPassiveUngrabDevice request containing an unvalidated, out-of-range modifier value, leading to an out-of-bounds...

EUVD-2026-112256

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...

CVE-2026-93523 X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...

CVE-2026-93522

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context...

CVE-2026-93522 X.Org Server Glamor CopyArea Heap Buffer Overflow

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context...

EUVD-2026-112254

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context...

CVE-2026-93522

A heap buffer overflow exists in glamor 's CopyArea CPU-to-FBO path due to mismatched size usage. The temporary buffer tmp_bits is sized based on the destination height but indexed using source coordinates, allowing writes to overflow when the source region is taller than the destination. This vu...

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence AI-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 202...

EUVD-2026-112149

USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB flash drives. Prior to version 1.1.5, getSectorSize in USB Test/src/driveinfo.cpp trusts DISKGEOMETRY.BytesPerSector returned by IOCTLDISKGETDRIVEGEOMETRY without checking wheth...

EUVD-2026-112147

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

CVE-2026-47235 SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

CVE-2026-47235

The SimulationCraft tool (versions after release-820-01 and before the May 7, 2026 nightly) is vulnerable to a Heap-Based Buffer Overflow and Out-of-Bounds Write in the bcp_api.cpp file. The root cause is a loop over the JSON sockets array that fails to bound gem_idx by MAX_GEM_SLOTS (four). This...

CVE-2026-47235 SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

CVE-2026-47235

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the "bcpapi.cpp" loop over the JSON "sockets" array uses "slotdata"sockets".Size" without bounding "gemidx" by "MAXGEMSLOTS", which is four in...

CVE-2026-47235 SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the bcpapi.cpp loop over the JSON sockets array uses slotdata"sockets".Size without bounding gemidx by MAXGEMSLOTS, which is four in...

EUVD-2026-112146

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context...

CVE-2026-93521

A heap buffer overflow exists in the X.Org X Server (versions before 2.1.25 ) and XWayland (versions before 24.4.14 ) within the RandR (Resize and Rotate extension) ChangeProviderProperty requests. The root cause is the incorrect calculation of buffer sizes and memory offsets when prepending or a...