CVE-2026-68585

creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm3w-vxp9-ccwc 2026-09-04 13:04:27+00:00| seen| https://gist.github.com/alon710/0a73f204f4113f41e2621c39634bb023...

libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption

A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the dnsnametolabels function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the...

CVE-2026-64197

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...

CVE-2026-64198

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB...

CVE-2026-64199

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue...

CVE-2026-64200

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...

CVE-2026-64196

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions...

CVE-2026-64195

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0...

CVE-2026-64200

DASYLab is vulnerable to an out-of-bounds read caused by improper validation of user-supplied data during string conversion when parsing a .DSB file. A malformed file can cause a read past the end of an allocated heap buffer. Exploitation requires a local attacker to trick a user into opening a s...

CVE-2026-64200 Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...

Important: Red Hat Security Advisory: Satellite 6.18.9 Async Update

A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

CVE-2026-64199 Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue...

CVE-2026-64199

CVE-2026-64199 is an out-of-bounds read vulnerability in DASYLab (MEAS X) caused by improper validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted file, making it a local attack vector with no privileges required but user i...

CVE-2026-64198 Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB...

CVE-2026-64198

CVE-2026-64198 is an out-of-bounds read in DASYLab (MEASX) caused by improper validation of user-supplied data during file handling. A read a few bytes past the end of an allocated heap buffer occurs when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .D...

CVE-2026-78071

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:09+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...

CVE-2026-78070

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:06+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...

CVE-2026-64197

CVE-2026-64197 is an out-of-bounds write vulnerability in DASYLab (National Instruments), caused by improper validation of user-supplied data during parsing of .DSB files , resulting in a write past the end of an allocated data structure. Exploitation requires a user to open a specially crafted ....