CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

EUVD-2026-92809

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-104037

A vulnerability exists in SSSD where a local attacker can trigger a denial of service (DoS) . By sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket , the attacker can cause an integer underflow and an out-of-bounds memory read . This flaw leads t...

CVE-2026-104037 Sssd: sssd: denial of service via packet length underflow in autofs responder

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

CVE-2026-104035

A flaw in the SSSD (System Security Services Daemon) within the Kerberos Credential Manager (KCM) responder allows for a Denial of Service (DoS) . A local user can trigger this by maintaining a persistent connection and repeatedly storing and destroying credentials. The root cause is that the ser...

CVE-2026-104031

A flaw exists in SSSD where the autofs responder service fails to release memory allocated during successful request processing until the client connection terminates. A local attacker can exploit this by maintaining an open connection and submitting repeated valid requests, resulting in memory e...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2026-92851

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion...

EUVD-2026-76072

compression vulnerable to Denial of Service via memory leak on premature response close...

CVE-2026-105760

The vLLM inference and serving engine for large language models is vulnerable to CPU and memory exhaustion in versions prior to 0.30.0 . An attacker can use the media_io_kwargs field to select the GLMGA video backend and provide large values for the fps and max_frames options. Because there is no...

EUVD-2026-87856

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary...

CVE-2026-105749

The Docling library (versions 2.0.0 through 2.131.0) is vulnerable to CPU and memory exhaustion via its HTML , JATS , OpenDocument spreadsheet , and BoxNote backends. The root cause is that these backends accept rowspan and colspan attribute values without an upper bound, triggering loops or memo...

CVE-2026-105747

The Docling library (versions 2.45.0 to 2.131.0 ) is vulnerable to memory exhaustion during METS-GBS format detection. The vulnerability exists because the components docling/datamodel/document.py and docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_m...

CVE-2026-58854

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55269

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-104713

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to its size, exhausting the Java heap a...

EUVD-2026-92764

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

CVE-2026-104713

The Apache Struts REST plugin is vulnerable to an allocation of resources without limits or throttling (CWE-770) because it reads request bodies into memory without any size bounds. An attacker can send a large request body to cause the server to exhaust the Java heap , resulting in a denial of s...