6667 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-87546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictio...
CVE-2026-87546: Incorrect Type Conversion or Cast
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Low...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106777 advisory. GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote...
Debian dla-4778 : python-pyasn1-doc - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4778 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4778-1 [email protected]...
CVE-2026-69585
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69438
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...
CVE-2026-69438
CVE-2026-69438 is a Remote Code Execution vulnerability in Microsoft JScript caused by an incorrect conversion between numeric types . An unauthorized attacker can exploit this over a network to execute code, with a CVSS 3.1 score of 8.1 (HIGH) — notably, high attack complexity is required but no...
EUVD-2026-73496
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...
SUSE CVE-2026-84963
An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...
SUSE CVE-2026-84969
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft JScript Remote Code Execution Vulnerability
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...
ROS-20260908-73-0107
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260908-73-0064
The vulnerability in xorg-x11-drv-nvidia is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260908-73-0063
The vulnerability in nvidia-kmod is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-87588
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87467
Name of the Vulnerable Software and Affected Versions Microsoft JScript affected versions not specified Description An incorrect conversion between numeric types allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment,...
CVE-2026-82058: Uncaught Exception
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...