CVE-2026-107635

A flaw was found in dislocker. An integer underflow vulnerability in metadata parsing functions can lead to a Denial of Service DoS by crashing the application. By providing a maliciously crafted BitLocker volume image with an invalid datum size, an attacker can trigger an out-of-bounds memory...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2026-106429

A flaw was found in libmongocrypt. An integer underflow in the Key Management Service KMS endpoint-parsing logic can cause a memory allocation failure when processing a malformed endpoint. An authenticated user can trigger this flaw by modifying a key document in the key vault collection or by...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

CVE-2026-42980-POC

الإفصاح العام عن CVE-2026-42980 يحتوي هذا المستودع على مواد الإفصاح العام عن CVE-2026-42980 ، وهي ثغرة من نوع تجاوز سفلي للعدد الصحيح integer underflow في نواة Windows WMI يمكن استغلالها لرفع الامتيازات المحلية إلى NT AUTHORITY\SYSTEM على أنظمة المختبر المعرضة للخطر. المقال الكامل English article...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

보안 공지: facil.io MIME 파서의 범위를 벗어난 읽기로 인한 서버 크래시 할당된 CVE ID CVE-2026-66729 제품: facil.io 영향을 받는 버전: facil.io = 0.6.0 모든 0.6.x, 모든 0.7.x, master; MIME 파서가 0.6.0에서 추가된 시점부터 영향 구성 요소: lib/facil/http/parsers/httpmimeparser.h CWE: CWE-191 정수 언더플로, CWE-125 범위를 벗어난 읽기 CVSS v3.1: 7.5...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6 CVE-2024-38063 الثغرة CVE-2024-38063 هي ثغرة تنفيذ التعليمات البرمجية عن بُعد موجودة في مكون TCP/IP في نظام Windows. وفقًا لشرح مايكروسوفت الرسمي، فإن مستوى خطورة هذه الثغرة هو الأقصى، وتقييم CVSS هو 9.8، وتتأثر إصدارات متعددة من أنظمة Windows بهذه الثغرة. يمكن للمهاجم استغلال...

CVE-2026-25075-check

Outil d'évaluation de la vulnérabilité CVE-2026-25075 Détectez en toute sécurité si un serveur VPN strongSwan est vulnérable à la CVE-2026-25075 sans provoquer d'interruption. Consultez l'analyse complète sur le blog de Bishop Fox. Description La CVE-2026-25075 est une vulnérabilité de...

CVE-2022-0185-Case-Study

CVE-2022-0185-دراسة-حالة دراسة الحالة هذه هي نتيجة لواجب لمقرر ECE 9069: مقدمة في القرصنة : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 نظرة عامة CVE-2022-0185 هو ثغرة من نوع تجاوز سعة المخزن المؤقت في الكومة heap-based buffer overflow تم العثور عليها في الطريقة التي تتحقق بها...

CVE-2026-75352

The OpENer v2.3 (commit 76b95cf) software contains an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to cause a denial of service (DoS). No specific remediation, exploit code, or in-the-wild exploitat...

EUVD-2026-95972

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98185

A flaw was found in the mwifiex driver in the Linux kernel. When processing wireless scan responses, the driver fails to properly validate response extents before calculating internal buffer boundaries. A malicious or compromised wireless device sending malformed scan response data can trigger an...

CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429

A vulnerability exists in the MongoDB libmongocrypt KMS endpoint-parsing logic due to an integer underflow . This flaw can lead to an allocation failure that terminates the application process, resulting in a denial of service . The issue is triggered when an authenticated user modifies a key doc...

CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

EUVD-2026-95160

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...