749406 matches found
CVE-2026-28633
In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28609
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28618
In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28596
In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28583
In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
[SECURITY] [DSA 6489-1] gst-plugins-base1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 08, 2026 https://www.debian.org/security/faq -...
Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review
Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...
Vulnerabilities in Microsoft Exchange servers
Microsoft has identified 9 vulnerabilities in Exchange Server. A malicious individual can exploit these vulnerabilities to carry out Denial-of-Service attacks, impersonate other users, gain elevated privileges, execute arbitrary code, and/or access sensitive data. The most severe vulnerability,...
EUVD-2026-73941
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
CVE-2026-66307
An integer underflow (wrap/wraparound) vulnerability in Skype for Business Server allows an unauthorized, network-based attacker to cause a denial of service (CVSS 3.1: 7.5 HIGH , high availability impact). The affected products are Skype for Business Server Subscription Edition , Server 2019 , a...
EUVD-2026-73940
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66303
CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...
CVE-2026-57099
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the SD-WAN component with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security vulnerabilities. IBM SevOne...
CVE-2026-66308
CVE-2026-66308 is an out-of-bounds read in Skype for Business Server (Subscription Edition, 2019, and 2015) that allows an authorized attacker to cause a denial of service over a network. The vulnerability is rated CVSS 3.1: 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, meani...
EUVD-2026-73935
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...
USN-8739-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2026-56366, CVE-2026-56368,...
USN-8739-1 imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2026-56366, CVE-2026-56368,...