329908 matches found
CVE-2026-68271
A flaw was found in the Linux kernel's drm/nouveau module. An issue with the error cleanup order in ucopy functions can lead to incorrect memory deallocation. This can result in a system crash, also known as a kernel oops, or a memory leak, potentially causing a denial of service...
CVE-2026-68221
A flaw was found in the Linux kernel's Nuvoton NPCM video driver. The npcmvideoprobe function allocates memory that is not properly freed on error paths or during device removal, leading to memory leaks. Additionally, when npcmvideosetupvideo fails, associated reserved memory is not released. The...
CVE-2026-68187
A flaw was found in the Linux kernel's exec subsystem, specifically within the transferargstostack function. A local user could provide a specially crafted argument or environment string during process creation, causing an unsigned loop counter to wrap. This leads to an out-of-bounds read and...
Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...
CVE-2026-18694 Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...
CVE-2026-18694
CVE-2026-18694 affects MongoDB Server geospatial query processing. An authenticated user with write privileges can store malformed geometry data that is later processed without validation, causing out-of-bounds memory access, a server crash (DoS), and potential memory exposure. The vulnerability ...
EUVD-2026-56917
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...
CVE-2026-18694
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memo...
CVE-2026-18700 Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collection using a certain type of validator. This could result ...
EUVD-2026-56909
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693 Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...
CVE-2026-18693
CVE-2026-18693 involves MongoDB Server handling of timeseries collections. The issue arises when an authenticated user with write privileges inserts certain documents, which can cause an internal data structure to become inconsistent. A subsequent insert into the affected bucket may trigger memor...
CVE-2026-18688 Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
CVE-2026-18688
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
EUVD-2026-56904
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
CVE-2026-18688
The CVE-2026-18688 entry describes an issue in MongoDB Server's aggregation framework that allows an authenticated user to trigger an out-of-bounds memory read by supplying a specially formed numeric parameter in a specific aggregation pipeline stage. This could cause a server crash (denial of se...
CVE-2026-68152
A flaw was found in the Linux kernel's AMT Accelerated Mobile Page device driver. A use-after-free vulnerability can occur due to a race condition during device removal. This allows delayed work items to access a freed memory structure, potentially leading to kernel crashes or memory corruption. ...