CVE-2026-78506

Microsoft Office Word contains an improper null termination vulnerability that allows an unauthorized attacker to disclose information locally . The flaw requires user interaction and no special privileges, with a high confidentiality impact but no integrity or availability impact, rated CVSS 5.5...

EUVD-2026-73817

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

EUVD-2026-73087

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

Microsoft Office Word Information Disclosure Vulnerability

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Windows Remote Desktop Protocol Information Disclosure Vulnerability

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

CVE-2026-70587: Improper Null Termination

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

PT-2026-87821

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description Improper null termination in the Windows Remote Desktop Protocol allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At t...

PT-2026-88010

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Null termination is a method used in programming to mark the...

CVE-2026-78506: Improper Null Termination

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

SUSE CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-74603

A flaw was found in the Linux kernel's ptp: ocp module. This vulnerability occurs because the EEPROM board ID, a fixed-size field, is not guaranteed to be null-terminated. When this ID is processed as a C string, it may lead to an over-read beyond its intended memory boundary. This memory...

CVE-2026-72241

A flaw was found in the kernel. In the leds: uleds module, a buffer overread can occur because the name string provided by userspace is not guaranteed to be null-terminated. This can lead to a local attacker potentially reading sensitive information from adjacent memory or causing a denial of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099697 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100523 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

UBUNTU-CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72241 leds: uleds: Fix potential buffer overread

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...