Lucene search
+L

321700 matches found

RedhatCVE
RedhatCVE
added 2 days ago8 views

CVE-2026-64339

A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. A malicious or malfunctioning Universal Serial Bus USB device can exploit this vulnerability by providing crafted input during a bulk IN transfer. This can lead to an out-of-bounds read, allowing the devic...

5.5CVSS5.3AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-67297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers...

8.7CVSS5.5AI score0.00343EPSS
SaveExploits0References2
OSV
OSV
added 3 days ago15 views

OESA-2026-3196 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the...

9.8CVSS6.6AI score0.00436EPSS
SaveExploits0References34
OSV
OSV
added 3 days ago13 views

OESA-2026-3189 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0, whe...

8.3CVSS7.8AI score0.00436EPSS
SaveExploits4References6
OSV
OSV
added 3 days ago14 views

OESA-2026-3186 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0, whe...

8.3CVSS7.3AI score0.00436EPSS
SaveExploits4References6
OSV
OSV
added 3 days ago13 views

OESA-2026-3185 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 12.3.0, whe...

8.3CVSS7.1AI score0.00436EPSS
SaveExploits4References6
NVD
NVD
added 3 days ago7 views

CVE-2026-67353

guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...

6.9CVSS0.00247EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago6 views

CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...

8.7CVSS0.00339EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago6 views

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

8.7CVSS0.00329EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago4 views

CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...

8.7CVSS0.00343EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago7 views

CVE-2026-67297

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

8.7CVSS0.00343EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago14 views

CVE-2026-67299

FreeRDP before 3.29.0 is affected by a client-side heap use-after-free in the async update path when WINDOW_ICON_ORDER is processed. In update_message_WindowIcon(), a shallow CopyMemory overwrites a newly allocated lParam->iconInfo with a parser-owned windowIcon->iconInfo pointer; after the...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago19 views

CVE-2026-67300

CVE-2026-67300 – FreeRDP before 3.29.0 : A client-side heap use-after-free in the async update message proxy affects RAIL WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER when AsyncUpdate is enabled. If a malicious RDP server sends crafted update orders, the proxy shallow-copies structures containi...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago28 views

CVE-2026-67299 FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp /async-update. In updatemessageWindowIcon a shallow CopyMemory overwrites a freshly allocated lParam-iconInfo with the parser-owned...

8.7CVSS0.00329EPSS
SaveExploits0References3
OSV
OSV
added 3 days ago4 views

CVE-2026-67299 FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp /async-update. In updatemessageWindowIcon a shallow CopyMemory overwrites a freshly allocated lParam-iconInfo with the parser-owned...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-67300 FreeRDP before 3.29.0 Use-After-Free via async message proxy

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

8.7CVSS0.00329EPSS
SaveExploits0References3
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-51820

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp /async-update. In updatemessageWindowIcon a shallow CopyMemory overwrites a freshly allocated lParam-iconInfo with the parser-owned...

8.7CVSS5.6AI score0.00329EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago11 views

CVE-2026-67353

Affected software: guzzlehttp/guzzle prior to 7.15.1. Issue: a denial-of-service vulnerability in CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions, enabling an attacker to return many large cookies and cause excessive in-memory data and oversized Cookie headers ...

6.9CVSS5.5AI score0.00247EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 3 days ago8 views

CVE-2026-67296

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...

8.7CVSS5.5AI score0.00343EPSS
SaveExploits0References3
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-51844

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...

8.7CVSS5.5AI score0.00343EPSS
SaveExploits0References2
Rows per page
Query Builder