ROS-20260909-73-0072

The vulnerability of the Tint component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

VRT0010, Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability for some Intel® Converged Security and Management Engine Intel® CSME and Intel® Server Platform Services Intel® SPS may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106777 advisory. GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote...

CVE-2026-69585

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69438

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-69438

CVE-2026-69438 is a Remote Code Execution vulnerability in Microsoft JScript caused by an incorrect conversion between numeric types . An unauthorized attacker can exploit this over a network to execute code, with a CVSS 3.1 score of 8.1 (HIGH) — notably, high attack complexity is required but no...

EUVD-2026-73496

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

SUSE CVE-2026-84963

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...

SUSE CVE-2026-84969

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

EUVD-2026-73021

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69585

CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...

Microsoft JScript Remote Code Execution Vulnerability

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87467

Name of the Vulnerable Software and Affected Versions Microsoft JScript affected versions not specified Description An incorrect conversion between numeric types allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment,...

EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-3353)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine...

ROS-20260908-73-0107

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260908-73-0064

The vulnerability in xorg-x11-drv-nvidia is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260908-73-0063

The vulnerability in nvidia-kmod is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-87588

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-82058: Uncaught Exception

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...