173814 matches found
CVE-2026-104042
A vulnerability exists in sssd where a local attacker can trigger a Denial of Service (DoS) . The flaw is caused by an out-of-bounds read (CWE-125) occurring when the service processes a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token sent to th...
CLEANSTART-2026-VD99251 flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input...
CLEANSTART-2026-WK54237 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...
CLEANSTART-2026-FK94872 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
Security vulnerability affects the prometheus-redis-exporter-fips package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
CVE-2026-105786
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...
CVE-2026-105751
A flaw was found in docling. When parsing OpenDocument files, the backend resolves image reference attributes directly as local filesystem paths without enforcing directory boundaries or URI scheme validation. An attacker could provide a crafted document that causes docling to read arbitrary loca...
CVE-2026-104037
A vulnerability exists in SSSD where a local attacker can trigger a denial of service (DoS) . By sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket , the attacker can cause an integer underflow and an out-of-bounds memory read . This flaw leads t...
EUVD-2026-92895
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...
CVE-2026-104037
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...
CVE-2026-104037 Sssd: sssd: denial of service via packet length underflow in autofs responder
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...
CVE-2026-104037
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...
CVE-2026-105744
A flaw was found in docling. When configured to process LaTeX documents using the Tectonic engine, the application does not restrict TeX file operations during compilation. An attacker could exploit this vulnerability by submitting crafted document input to read sensitive files or overwrite...
CVE-2026-56129
Description Lecture/écriture arbitraire de la mémoire physique à l'aide de Toshiba qiomem.sys depuis le ring 3 ne fonctionne que jusqu'à 4 Go d'adresses physiques. Le pilote est distribué via le Microsoft Update Catalog. Autres variantes. Non répertorié dans la Microsoft Vulnerable Driver List,...
PT-2026-107227
When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so they can review the repository. Rejecting or cancelling the transfer did not revoke this collaboration, so the named recipient kept persistent read access to...
PT-2026-106576
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include...
PT-2026-106517
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate curve data length in the calibration curve converters p54 convert rev0 and p54 convert rev1 read calibration curve data from the device-supplied EEPROM entry using channel and points-per-channel counts taken...
PT-2026-106554
In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set shrinker bit with cgroup.memory=nokmem With cgroup.memory=nokmem, shrinker memcg alloc bails out early and never allocates an id, so shrinker-id keeps the 0 it got from the kzalloc in shrinker alloc. li...
PT-2026-106701
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfs skb reset frag walk iptfs skb reset frag walk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...
CVE-2026-106284: Out-of-bounds Read
Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106290: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...