com.alanpoi:alanpoi-all (>=1.3.4, <=3.0.0), com.alanpoi:alanpoi-analysis (>=1.3.4, <=3.0.0) +10 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.3.0)

org.docx4j:docx4j-core MAVEN version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.alanpoi:alanpoi-all =1.3.4, =1.3.4, =3.0.0 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.3.0 -...

org.docx4j:docx4j-conversion-via-microsoft-graph (8.2.8), org.docx4j:docx4j-diffx (8.2.8) +9 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.8)

org.docx4j:docx4j-core MAVEN version 8.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-conversion-via-microsoft-graph 8.2.8 - org.docx4j:docx4j-diffx 8.2.8 -...

org.docx4j:docx4j-conversion-via-microsoft-graph (8.2.7), org.docx4j:docx4j-diffx (8.2.7) +8 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.7)

org.docx4j:docx4j-core MAVEN version 8.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-conversion-via-microsoft-graph 8.2.7 - org.docx4j:docx4j-diffx 8.2.7 -...

com.zhuozhengsoft:pageoffice-ext (>=1.0.0.3, <=1.0.0.4), org.docx4j:docx4j-bundle (8.3.12) +11 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.3.12)

org.docx4j:docx4j-core MAVEN version 8.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.zhuozhengsoft:pageoffice-ext =1.0.0.3, =1.0.0.4 - org.docx4j:docx4j-bundle 8.3.12 -...

com.gitee.dqhm:emmon-util (1.0.2), org.cqfn:reportwine (0.1) +11 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.9)

org.docx4j:docx4j-core MAVEN version 8.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.gitee.dqhm:emmon-util 1.0.2 - org.cqfn:reportwine 0.1 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.2.9 ...

ANT-2026-ZYEZKB5Y · OpenSC · Stack Buffer Overflow

stack-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-ZYEZKB5Y: Stack buffer overflow in...

hfsplus Kernel DoS

The vulnerability of the hfsplus component in the Linux operating system’s kernel is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72207

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72207

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72207 ntfs: not change 0-byte $DATA attribute to non-resident

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72207 ntfs: not change 0-byte $DATA attribute to non-resident

In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfsresidentattrresize cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT recrord...

CVE-2026-72207

The CVE-2026-72207 entry concerns the Linux kernel NTFS handling: when resizing a resident NTFS attribute, ntfs_resident_attr_resize() attempts to free space by converting other resident attributes to non-resident; the vulnerability arises if 0-byte resident $DATA attributes are considered for co...

PT-2026-72395

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs resident attr resize function may incorrectly convert zero-length resident $DATA attributes to non-resident attributes when attempting t...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Incorrect Type Conversion or Cast

Overview Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast through the name-converter process. An attacker can cause transferred files to be owned by root by manipulating responses from the name-converter to return empty values for uid or gid lookups, which are...

JLSEC-2026-1278 GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to...

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

UBUNTU-CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

Microsoft Excel Office 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs is related to data type conversion errors. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted malicious file...