CVE-2026-87823

zstd-jni (Java JNI binding for Zstandard compression) versions 1.1.1 through 1.5.7-13 are vulnerable to an out-of-bounds read caused by 32-bit signed bounds checks in three direct-ByteBuffer frame-size native methods. An attacker can supply negative offset values near Integer.MIN_VALUE , causing ...

CVE-2026-87823 zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MINVALUE to read unmapped memory, causing JVM...

undici: undici: Integrity failure due to caching of unsafe HTTP method responses

A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...

Linux Distros Unpatched Vulnerability : CVE-2026-87877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers c...

PT-2026-89053

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN VALUE to read unmapped memory, causing JVM...

CVE-2026-85008

A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...

CVE-2026-73005

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2026-73005

CVE-2026-73005 is a Use After Free vulnerability in Windows Authentication Methods that allows an authorized, locally privileged attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integrity...

Windows Authentication Methods Elevation of Privilege Vulnerability

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2026-73005: Use After Free

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

PT-2026-87914

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-85008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from t...

Insufficient Verification of Data Authenticity

Overview org.webjars.npm:undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the interceptors.cache interceptor, whose skip-list construction subtracts the configured methods from t...

CVE-2026-85008

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

UBUNTU-CVE-2026-85008

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

CVE-2026-85008

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

CVE-2026-85008

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

CVE-2026-85008 undici vulnerable to caching and replay of unsafe HTTP method responses

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

CVE-2026-85008 undici vulnerable to caching and replay of unsafe HTTP method responses

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

CVE-2026-85008 undici vulnerable to caching and replay of unsafe HTTP method responses

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...