PT-2026-82737

Name of the Vulnerable Software and Affected Versions MongoDB libmongocrypt affected versions not specified Description A missing input-validation issue exists in the automatic-encryption context setup of MongoDB libmongocrypt. This flaw allows a caller-supplied database identifier to be accepted...

ROS-20260827-73-0017

The vulnerability of the nullinittagset function in the drivers/block/nullblk/main.c module of the Linux kernel’s block devices driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260827-73-0029

The vulnerability of the ieee80211probeclient function in the net/mac80211/cfg.c module of the mac80211 stack in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-82594

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to validate the total field within QR JSON payloads before materializing ranges. An attacker can provide specially crafted QR images containing extremely large values in th...

CVE-2026-47880: Improper Input Validation

A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or jsonTypeId which are copied verbatim into the Spring Integration MessageHeaders. Spring Integration 7.1.0 Spring Integration...

PT-2026-82530

Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description Improper input validation in the buildFilter function located in processor/processor.go allows attackers to cause a Denial of Service DoS, a condition where the system becomes unavailable to its intended users...

CVE-2026-30064

The software free5gc v4.0.1 is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the buildFilter function located in processor/processor.go . An attacker can trigger this condition by providing a crafted input . No specific exploitation details or remediation step...

CVE-2026-30058

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30064

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67116

Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67114

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

Secure Kernel Mode Privilege Escalation

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux NFC Driver Heap Buffer Overflow DoS

The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

CVE-2026-30058

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397 — Purple Team: Exploit + Detection Two halves...

CVE-2026-64781

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper input validation. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-56547

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

UBUNTU-CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

EUVD-2026-66668

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

SUSE CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...