Lucene search
+L

3057 matches found

Snyk
Snyk
•added 2026/02/25 7:11 p.m.•17 views

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•9 views

PT-2026-31530

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description An integer overflow exists in the WebRTC component of Google Chrome. A remote attacker can exploit this issue via a specially crafted HTML page to perform an out-of-bounds memory write,...

10CVSS7.1AI score0.00523EPSS
SaveExploits1References155
Packet Storm
Packet Storm
•added 2026/02/19 12:00 a.m.•305 views

📄 Pillow PSD Parser Out-Of-Bounds Write

Proof of concept exploit that creates a malicious .psd file for Pillow that attempts an out-of-bounds write. This issue is patched in version 12.1.1. ============================================================================================================================================= | Tit...

9.3CVSS7AI score0.0049EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/02/19 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-2648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF fil...

8.8CVSS8.2AI score0.00377EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/18 10:16 p.m.•22 views

CVE-2026-2648

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. Chromium security severity: High...

8.8CVSS0.00377EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/18 9:39 p.m.•5 views

CVE-2026-2648

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. Chromium security severity: High...

8.2AI score0.00377EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/18 9:39 p.m.•48 views

CVE-2026-2648

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. Chromium security severity: High...

0.00377EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/18 9:39 p.m.•112 views

CVE-2026-2648

Google Chrome versions prior to 145.0.7632.109 are vulnerable to a heap buffer overflow in the PDFium component. A remote attacker can exploit this by providing a crafted PDF file to perform an out-of-bounds memory write . This vulnerability can lead to arbitrary code execution , denial of servic...

8.8CVSS8.2AI score0.00377EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•3 views

CVE-2026-2648: Heap-based Buffer Overflow

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. Chromium security severity: High...

8.8CVSS8.3AI score0.00377EPSS
SaveExploits0References1
osv_suse
osv_suse
•added 2026/02/13 10:56 a.m.•13 views

SUSE-SU-2026:0498-1 Security update for openssl1

This update for openssl1 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes bsc1256834. - CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse function bsc1256837. - CVE-2025-69421: NULL Pointer Dereference in...

7.5CVSS6.4AI score0.00944EPSS
SaveExploits2References9
Vulnrichment
Vulnrichment
•added 2026/02/12 1:00 p.m.•17 views

CVE-2026-2007 PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

Heap buffer overflow in PostgreSQL pgtrgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and...

8.2CVSS7.6AI score0.00546EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/12 1:00 p.m.•229 views

CVE-2026-2007

CVE-2026-2007 affects PostgreSQL 18.0 and 18.1 due to a heap buffer overflow in the pg_trgm component, where crafted input strings can write patterns into server memory. The attacker’s control over the byte patterns is limited, and the document notes unknown impacts, with a potential for privileg...

8.2CVSS7.6AI score0.00546EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/11 10:58 p.m.•10 views

CVE-2026-20700

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this...

8.4AI score0.01392EPSS
SaveExploits4References5
NVD
NVD
•added 2026/02/10 8:16 p.m.•24 views

CVE-2025-52534

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity...

5.3CVSS0.00345EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/02/10 8:16 p.m.•21 views

CVE-2025-52534

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/10 7:28 p.m.•49 views

CVE-2024-36355

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 sleep wake up, potentially resulting in arbitrary code execution...

7CVSS0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/10 7:12 p.m.•47 views

CVE-2025-52534

CVE-2025-52534 affects AMD CPUs (AMD EPYC/embedded families) via an improper bound check in CPU microcode. A malicious guest could write to host memory, potentially compromising integrity. Public sources list the vulnerability but do not describe exploited in-the-wild activity; remediation/patch ...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-52534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity. CVE-2025-52534 No...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•8 views

CVE-2025-52534: Improper Validation of Specified Quantity in Input

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/03 6:47 p.m.•22 views

EUVD-2025-206683

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code. The vulnerability arises from improper validation of a packet field whose offset is used to determine...

7.3CVSS6.7AI score0.00453EPSS
SaveExploits0References4
Rows per page
Query Builder