Lucene search
+L

1046 matches found

ATTACKERKB
ATTACKERKB
added 2 hours ago2 views

CVE-2026-66401

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS
SaveExploits0References4
CVE
CVE
added 2 hours ago3 views

CVE-2026-66401

CVE-2026-66401 affects FreeRDP prior to 3.29.0. The vulnerability is an out-of-bounds heap read in the UVC H.264 extension-unit parser that does not validate descriptor length before accessing the GUID field. A local attacker using a malicious USB video camera can trigger a heap read beyond alloc...

2.4CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added 2 hours ago7 views

CVE-2026-67291

FreeRDP vulnerability CVE-2026-67291 affects FreeRDP before 3.29.0 (versions

8.7CVSS5.7AI score
SaveExploits0References3
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-51831

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 hours ago2 views

CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS
SaveExploits0References4
Patchstack
Patchstack
added yesterday7 views

NPM: re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

NPM: re2: Out-of-bounds heap read in exec/test/match via attacker-influenced lastIndex on a non-ASCII subject → uncatchable process crash DoS vulnerability discovered by ? in WordPress Npm re2 versions = 1.25.1...

5.7CVSS5.5AI score0.00121EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added yesterday5 views

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

Summary re2 validates the user-settable lastIndex against the subject's UTF-8 byte length but then uses it as a UTF-16 code-unit count to walk the subject buffer, with no bounds check. For any non-ASCII subject, the byte length is larger than the true character count, so a lastIndex between those...

5.7CVSS5.7AI score0.00121EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added yesterday9 views

EUVD-2026-51297

re2: Out-of-bounds heap read in exec/test/match via attacker-influenced lastIndex on a non-ASCII subject → uncatchable process crash DoS...

5.7CVSS5.4AI score0.00121EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday12 views

EUVD-2026-51358

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

7.1CVSS6AI score0.00175EPSS
SaveExploits0References3
EUVD
EUVD
added yesterday9 views

EUVD-2026-51357

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...

7.1CVSS5.8AI score0.00249EPSS
SaveExploits0References3
NVD
NVD
added 2 days ago6 views

CVE-2026-66369

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

7.1CVSS0.00175EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago5 views

CVE-2026-66360

The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the processing of the encoded presentation data allows an attacker controlled field with a zero length value to trigger a bounded heap over read. This...

8.7CVSS0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago7 views

CVE-2026-66349

The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...

6.9CVSS0.00181EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago7 views

CVE-2026-63550

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...

7.1CVSS0.00249EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-66369 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

7.1CVSS0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago10 views

CVE-2026-66349

The CVE-2026-66349 entry concerns the MMS server connection handler. A flaw in processing BER-encoded request data occurs when an MMS confirmed request PDU with an extended BER tag is received over an established session, where a missing bounds check can cause the decoder to advance its internal ...

6.9CVSS6AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago32 views

CVE-2026-56758 MZ Automation libiec61850 Out-of-bounds Read

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

6.9CVSS0.00181EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago2 views

DEBIAN-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.4AI score0.00263EPSS
SaveExploits0References1
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-51306

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago9 views

CVE-2026-55777

GoAccess (real-time web log analyzer/viewer) is affected by an out-of-bounds heap read in the parse_ios() function prior to version 1.11. A crafted User-Agent in a processed access log can cause memmove to use an attacker-controlled offset as both source offset and copy length, allowing reading u...

5.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder