EUVD-2026-70508

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

AZL-99234 CVE-2026-85091 affecting package kata-containers 3.32.0.kata0-2

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

AZL-99090 CVE-2026-85091 affecting package zlib 1.3.2-1

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

AZL-99276 CVE-2026-85091 affecting package mariadb 10.11.18-1

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

AZL-99294 CVE-2026-85091 affecting package mysql 8.0.46-1

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

USN-8719-1: APR-util vulnerabilities

It was discovered that APR-util incorrectly performed password hash comparisons in a way that was not constant-time. An attacker could possibly use this issue to obtain sensitive information. CVE-2025-49506 It was discovered that APR-util incorrectly handled recursive XML element quoting. An...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574 - Dépassement de tampon sur le tas dans Squid Vulnérabilité trouvée sur le proxy Squid. CVE-2025-54574 — Dépassement de tampon sur le tas critique dans le proxy Squid Ce dépôt documente la découverte, l'analyse et le processus de divulgation responsable de CVE-2025-54574, un...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 سكريبت الفحص المحلي اللغة: الصينية | الإنجليزية يوفر هذا المستودع سكريبتين للفحص المحلي، للتحقق من وجود مخاطر متعلقة بـ CVE-2026-42945 في Nginx وOpenResty وTengine على خوادم Linux/Windows. السكريبت يعمل فقط على جمع البيانات للقراءة فقط وتقييم محلي، ولا ينفذ PoC للثغرة، ولا ير...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

CVE-2026-42945

CVE-2026-42945: NGINX Rift ثغرة تجاوز سعة المخزن المؤقت في الكومة نظرة عامة CVE-2026-42945 هي ثغرة خطيرة من نوع تجاوز سعة المخزن المؤقت في الكومة Heap Buffer Overflow في خادم NGINX، وتُعرف باسم "NGINX Rift". توجد هذه الثغرة في منطق معالجة توجيهي rewrite وset في NGINX. عند توفر شروط تكوين محددة،...

Cisco-ASA-CVE-2025-20333-Scanner

ماسح CVE-2025-20333 ماسح تشخيصي مبني على بايثون لـ تجاوز سعة المخزن المؤقت لخادم الويب VPN في Cisco ASA / FTD CVE-2025-20333. CVE-2025-20333 هي ثغرة حرجة من نوع تجاوز سعة المخزن المؤقت على الكومة في معالج رفع ملفات WebVPN يمكن أن تؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE كجذر عند استغلالها بنجاح...

CVE-2026-7482

🚨 CVE-2026-7482: تجاوز قراءة في الذاكرة Heap Buffer Over-Read في Ollama 📝 الوصف يحدد CVE-2026-7482 ثغرة حرجة لتجاوز القراءة في الذاكرة Heap Buffer Over-Read في نقطتي النهاية /api/create و /api/push في Ollama ، وهو إطار عمل مفتوح المصدر لتشغيل نماذج اللغة محليًا. تسمح هذه الثغرة لمهاجم عن بُعد وغي...

CVE-2026-85091 zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

EUVD-2026-70301

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

CVE-2026-85091 zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 are affected by a heap buffer overflow in the gz_vacate() function. The root cause is an unchecked memmove() that writes beyond the internal input buffer boundary when processing non-blocking gzwrite() operations with stale external buffer pointers . An attacke...

PT-2026-85285

Name of the Vulnerable Software and Affected Versions MOOS essential-moos versions prior to 10.0.2 Description A buffer overflow exists in the CMOOSUDPLink::ReadPktFromArray function. Remote attackers can corrupt heap memory by sending crafted UDP datagrams with negative declared lengths to the...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.6 (AXSA:2026-1752:27)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1752:27 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafte...

Fedora 44 : firefox / nss (2026-42a3a95e62)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-42a3a95e62 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...