CVE-2026-47886

Spring Framework applications that evaluate user-supplied SpEL expressions are vulnerable to a Denial of Service via unbounded exponentiation when the power operator (^) is used with a BigDecimal or BigInteger operand and a large exponent value. Affected versions span 5.2.25.RELEASE and earlier t...

EUVD-2026-66849

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

EUVD-2026-66848

The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration...

CVE-2026-47881 Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

EUVD-2026-66844

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-47881

CVE-2026-47881 is a denial-of-service vulnerability in Spring Batch 's FlatFileItemReader (versions 4.3.0–4.3.13 , 5.2.0–5.2.6 , and 6.0.0–6.0.4 ). A specially crafted input file exploiting multi-line record assembly can cause excessive CPU and memory consumption, stalling or exhausting the batch...

kernel-sanitizers

Linux Kernel Sanitizers Hinweis: Die meisten Sanitizer werden im Linux-Kernel-Repository gepflegt und hier nicht gehostet. Dieses Repository enthält Out-of-Tree-Informationen und Prototypen für KASAN, UBSAN, KCSAN, KFENCE, KMSAN und KTSAN. Beachten Sie, dass der KMSAN-Code separat gehostet wird...

EUVD-2026-66821

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

EUVD-2026-66826

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

EUVD-2026-66824

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...

EUVD-2026-66828

In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.7.19 and earlier...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

EUVD-2026-66834

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of the ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption by sending a crafted software SMI (SW SMI) request with an oversized length value. The CVSS 4.0 score is 6.8 (Medium) , reflecting ...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2026-47863

In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.7.19 and earlier...

CVE-2026-47860

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-47851

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47857

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go Ethereum geth 1.8.11 से पहले के LES प्रोटोकॉल कार्यान्वयन में GetBlockHeadersMsg हैंडलर, ऐरे इंडेक्स के लिए पूर्णांक साइननेस त्रुटि के कारण एक्सेस उल्लंघन का कारण बन सकता है, जो हमलावरों को -1 के query.Skip मान वाला पैकेट भेजकर डिनायल...