518 matches found
PT-2026-137223
Name of the Vulnerable Software and Affected Versions @tsparticles/mcp-server versions prior to 4.3.2 Description The HTTP mode of the server reuses a single stateful StreamableHTTPServerTransport for every client. An unauthenticated client can claim the shared transport state by sending an initi...
CVE-2026-98951
In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin userregsetcopyin only copies count bytes, so a PTRACESETREGSET request with a short iovlen leaves the rest of the stack buffer uninitialized. In riscvvrset that garbage ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ftrace: A null pointer dereference occurred in ftraceaddmod. The @ftracemod is allocated using kzalloc. Therefore, both members prev, next of @ftracemode-list are NULL. This makes calling listdel invalid. If kstrdup for...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
GHSA-PFWJ-2F93-RF42 Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause application crashes by supplying crafted WPF pixel-shader bytecode that desynchronizes parsing passes, leading to heap...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted pixel-shader bytecode in the CPSTrans::Initialize process. An attacker can achieve arbitrary code execution or cause a denial of service by enticing a user to open or interact with a malicious file or...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...
GHSA-G44W-H65V-4CW9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via crafted WPF pixel-shader bytecode in the CPSTrans::Initialize function. An attacker can achieve arbitrary code execution or cause application crashes by supplying maliciously crafted input that leads to heap...
PT-2026-120383
Уязвимость функции nsc context initialize encode RDP-клиента FreeRDP связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2026-110674
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0 Description A double-free issue exists in the nsc context initialize encode function. This occurs when a partial buffer growth failure leaves dangling plane pointers. A remote attacker can use a specially craft...
OSV-2026-1355 UNKNOWN READ in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568469733 Crash type: UNKNOWN READ Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypeImf40::Name, I Imf40::Header::insert Imf40::initialize...
CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc (CENTOS7:CLSA-2025:1758023679)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1758023679 advisory. - An exploitable heap overflow vulnerability exists in the Fiddle::Function.new initialize function functionality of Ruby. In Fiddle::Function.ne...
CVE-2026-97963
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptplock at probe time priv-ptplock is only initialized in stmmacptpregister, which runs during stmmacopen. However, the lock is also used while the interface is down and has never been opened:...