8771 matches found
CVE-2026-89321
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
EUVD-2026-77328
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
CVE-2026-89321
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
CVE-2026-89321
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
CVE-2026-89321
Eclipse OpenVSX is vulnerable to a disk exhaustion issue in its WebResourceService . When a VSIX is first requested via the unpkg endpoint, the service opens a zip entry with ZipFile.getInputStream() and passes the decompressed stream to Files.copy() without counting bytes written. The resulting ...
Security information for Hitachi Disk Array Systems
Overview CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability CVE-2026-34348 | Windows Event Loggi...
PT-2026-91576
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.8 macOS Golden Gate versions prior to 27 macOS Tahoe versions prior to 26.7 Description A buffer overflow occurs when mounting a maliciously crafted disk image, which may lead to unexpected system termination...
CVE-2026-84565: Out-of-bounds Read
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...
CVE-2026-88932: Uncontrolled Resource Consumption
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
PT-2026-91470
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...
CVE-2026-89321: Improper Handling of Highly Compressed Data (Data Amplification)
Publishing limits the compressed size of a VSIX ovsx.publishing.max-content-size, 512 MB by default but nothing limited how large an entry becomes when opened. On the first request to /vscode/unpkg/namespace/extension/version/path, WebResourceService opened the entry with ZipFile.getInputStream a...
PT-2026-91122
Name of the Vulnerable Software and Affected Versions multer versions 2.2.0 through 2.3.0 Description multer is a Node.js middleware for handling multipart/form-data uploads. When a request using disk storage is aborted during the upload process, file writes that finish after the abort cleanup ha...
CVE-2026-43761: Out-of-bounds Write
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination...
CVE-2026-84588: Out-of-bounds Write
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...
PT-2026-91622
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An out-of-bounds read occurs when processing a maliciously crafted disk image, which may lead to unexpected app...
PT-2026-91637
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A buffer overflow occurs when mounting a maliciously crafted disk image, which may lead to unexpected system termination...
PT-2026-91496
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination...
CVE-2026-84519: Out-of-bounds Write
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...
CVE-2026-84581: Buffer Copy without Checking Size of Input
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...
CVE-2026-28934: Buffer Copy without Checking Size of Input
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...