EUVD-2026-75943

PCRE2 before 10.48, on 32-bit platforms, has a pcre2patternconvert out-of-bounds write when an attacker can provide a large pattern...

EUVD-2026-75942

PCRE2 before 10.48 has a pcre2match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data...

EUVD-2026-75945

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...

EUVD-2026-75944

PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...

CVE-2026-13326

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

CVE-2026-89160

PCRE2 versions before 10.48 are affected by an out-of-bounds read in the pcre2_match function, triggered when matching an invalid UTF-8 subject string with the PCRE2_MATCH_INVALID_UTF flag. The vulnerability results in a low availability impact (CVSS 3.7, HIGH attack complexity, no privileges req...

CVE-2026-89158

PCRE2 versions prior to 10.48 are affected by an integer overflow in the pcre2_compile_32 function, specifically on 32-bit platforms . The overflow leads to an out-of-bounds write , which can result in memory corruption. The CVSS v3.1 score is 6.5 (Medium) with a network attack vector and high co...

CVE-2026-89157

PCRE2 versions before 10.48 on 32-bit platforms are affected by an out-of-bounds write in the pcre2_pattern_convert function, triggered when an attacker supplies a large pattern . The vulnerability is rated CVSS 5.7 (MEDIUM) with a local attack vector, high complexity, no privileges or user inter...

CVE-2026-89156

PCRE2 before 10.48 is affected by an out-of-bounds read in pcre2_match that occurs after a JIT fallback when an attacker can supply invalid UTF data . The CVSS 3.1 score is 2.9 (Low) , reflecting a local attack vector with high complexity, no required privileges, and a limited availability impact...

CVE-2021-4034

CVE-2021-4034 — PwnKit Local Privilege Escalation · Master's Thesis Research -orange Memory corruption vulnerability in polkit's pkexec utility Local Privilege Escalation → root via out-of-bounds write Affected: polkit 0.105-31 and earlier · Patch: polkit 0.105-33 January 2022 Interactive root...

CVE-2024-21762

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability Exploit poc by assetnote root@kitploit: ssldohandshakeptr = b"%60%ce%42%00%00%00%00%00" getcwdptr = b"%70%62%2c%04%00%00%00%00" pivot1 = b"%52%f7%fd%00%00%00%00%00" push rdi; pop rsp; ret; pivot2 =...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-88914 Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V: Multiple Vulnerabilities in vmswitch Multiple bugs are present in WPP code when handling set OID requests, one of them allowing to dereference read access an attacker controlled pointer, and the rest causing out of bounds read accesses. This repository contains...

EUVD-2026-75879

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

CVE-2022-28281

CVE-2022-28281: Mozilla Firefox Out of bounds write due to unexpected WebAuthN Extensions This is a bug that can be triggered from a compromised Windows Firefox renderer process. If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent...

CVE-2021-32537

CVE-2021-32537: Out-of-bounds access in RTKVHD64 leading to pool corruption. This is a bug that I reported to Realtek beginning of April 2021. The affected driver is named RTKVHD64.sys and seems to be available on a bunch of mainstream hardware tested the below hardware configurations but probabl...

CVE-2019-9810

CVE-2019-9810 Exploit for Firefox on Windows CVE-2019-9810 is a vulnerability that has been found and exploited at Pwn2Own 2019 by Richard Zhu and Amat Cama. It affects Mozilla's JavaScript engine, Spidermonkey and was used to achieve renderer compromise. The issue has been fixed in mfsa2019-09...