120273 matches found
CVE-2026-68158
A flaw was found in libceph within the Linux kernel. A remote attacker could send a maliciously crafted CEPHMSGOSDMAP message, leading to a multiplication overflow in the decodenewupstateweight function. This overflow causes an incorrect bounds check, which may result in out-of-bounds memory read...
CVE-2026-73067
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...
CVE-2026-73067 Tesseract: Heap OOB read in the DAWG loader
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...
CVE-2026-73067
CVE-2026-73067 affects the Tesseract OCR engine. A crafted .traineddata model loaded via TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg to accept an unterminated forward-edge run, leading to SquishedDawg::Load calling num_forward_edges(0) and last_edge reading beyond edges_, which t...
EUVD-2026-56182
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...
CVE-2026-73067 Tesseract: Heap OOB read in the DAWG loader
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...
CVE-2026-18125
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service...
EUVD-2026-56154
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service...
CVE-2026-18125
CVE-2026-18125 reports an out-of-bounds read in the Ivanti Endpoint Manager Agent prior to 2024 SU7, allowing a remote unauthenticated attacker to crash the agent service (CVSS v3.1 base score 7.5, HIGH). Affected software: Ivanti Endpoint Manager Agent (pre-2024 SU7). The document does not provi...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-47702 TypeBot API tokens stored in plaintext
TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...
thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory...
Microsoft Office Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...