71537 matches found
CVE-2026-19174
A flaw was found in V8, the JavaScript engine used in Google Chrome. This integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox—a protective environment that limits what a program can do. This can occur when a user visits a special...
CVE-2026-12852
A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation,...
CVE-2026-73066 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
EUVD-2026-56181
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
CVE-2026-73066 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
CVE-2026-73066 Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
CVE-2026-73066
Tesseract prior to 5.5.3 is affected by a heap out-of-bounds write in LSTM Convolve via a crafted .traineddata loaded through the deserializer. The root cause is an unchecked signed integer multiplication that wraps the convolution output-channel count, undersizing the forward-pass output buffer ...
Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: Security fixes: CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operati...
SUSE-SU-2026:3585-1 Security update for spice-vdagent
This update for spice-vdagent fixes the following issues: Security fixes: - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest...
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
Microsoft Office Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...
Windows DNS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally...
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
Microsoft Outlook Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...