5550 matches found
CVE-2026-82435 Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder
Description The worker's Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline and acts on frames before any authentication has taken place. It allocated buffers sized from a length field carried in the frame, so a single frame from an unauthenticated peer...
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-13293)
Summary IBM MQ has addressed a bypass of the Java deserialization allowlist in the IBM MQ JMS client that could allow a remote authenticated attacker to execute arbitrary code on a system consuming JMS ObjectMessages Vulnerability Details CVEID:CVE-2026-13293 DESCRIPTION: IBM MQ could allow a...
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-10751)
Summary IBM MQ has addressed a Java deserialization filter bypass in the IBM MQ JMS client that could allow a remote authenticated attacker to execute arbitrary code Vulnerability Details CVEID:CVE-2026-10751 DESCRIPTION: IBM MQ Java and JMS client libraries could allow an authenticated attacker ...
Astra Linux – Vulnerability in Chromium
Before version 102.0.5005.61, using "After Free" in messaging in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...
Security Bulletin: IBM MQ Java messaging is vulnerable to XML external entity injection (CVE-2026-12666)
Summary IBM MQ has addressed an XML external entity XXE vulnerability in the IBM MQ Classes for Java client's RFH2 header parser Vulnerability Details CVEID:CVE-2026-12666 DESCRIPTION: IBM MQ Classes for Java could allow an authenticated attacker to obtain sensitive information or cause a denial ...
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-11729)
Summary IBM MQ has addressed a Java deserialization vulnerability in the IBM MQ Java client's internal command manager Vulnerability Details CVEID:CVE-2026-11729 DESCRIPTION: IBM MQ Java client library could allow an authenticated attacker to execute arbitrary code in client applications due to...
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-12728)
Summary IBM MQ has addressed a deserialization filter bypass vulnerability in the IBM MQ Java client's distributed messaging component that could allow a remote authenticated attacker to execute arbitrary code by delivering crafted serialized messages that bypass the configured deserialization...
CVE-2026-90543
WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, contains a missing authentication vulnerability in plugin/Live/socketMessageLiveOwner.json.php. The script reads the key and msg parameters from $REQUEST, resolves the stream owner via...
The vulnerability of the Skype for Business Server’s instant messaging program, related to improper external management of file names or paths, allows a hacker to execute arbitrary code.
The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof
Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...
CVE-2026-57822: Deserialization of Untrusted Data
When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...
CVE-2026-70583
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70584
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70583
Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...
EUVD-2026-73657
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
EUVD-2026-73084
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70584
Windows Core Messaging is affected by a type confusion vulnerability (access of resource using incompatible type) that allows a locally authenticated attacker to escalate privileges. The impact is rated HIGH (CVSS 3.1 base score 7.8, full confidentiality, integrity, and availability impact) with ...
