CVE-2026-110170

A Use after free vulnerability in the Bindings component of Google Chrome prior to version 155.0.8059.79 allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page. This flaw was reported by Google and is part of a broader set of security fixes in the stable c...

CVE-2026-110143

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read

A flaw was found in OpenEXR. An attacker can craft a malicious deep EXR image file that, when opened by an application, can lead to an out-of-bounds read in the OpenEXRUtil library's SampleCountChannel::row API. This vulnerability can result in information disclosure, where adjacent heap memory i...

Important: Red Hat Security Advisory: OpenEXR security update

An update for OpenEXR is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read

A flaw was found in OpenEXR. An attacker could provide a specially crafted deep image that, when processed, would cause an out-of-bounds read in the TypedDeepImageChannel::row API if the image has a non-zero dataWindow origin. This vulnerability can lead to a heap out-of-bounds read, resulting in...

GHSA-F8QH-MQG4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...

CVE-2026-100126

Adobe Bridge is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker can exploit this issue to access sensitive information, but the attack requires user interaction , specifically the victim opening a malicious file. No spe...

CVE-2026-100126 Bridge | Out-of-bounds Read (CWE-125)

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-100614

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-88086

An out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an unauthorized attacker to disclose information over an adjacent network. While specific versions are not detailed in the description, related security updates are identified in KB5126967 , KB5128495 , KB5128492...

EUVD-2026-100612

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-88081

A vulnerability in Microsoft SQL Server involving an out-of-bounds read allows an authorized attacker to disclose information over a network. Microsoft has released security updates to address this issue, which can be found through relevant Knowledge Base articles including KB5126967 , KB5128495 ...

CVE-2026-85888

A high-severity out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with multiple versions, including SQL Server 2017, 2019, 2022, and 2025 . Microsoft has released securit...

EUVD-2026-100611

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100607

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67628

An out-of-bounds read vulnerability exists in SQL Server , which allows an authorized attacker to disclose information over a network. The vulnerability is categorized as an information disclosure issue. Microsoft has released security updates to address this, including KB5128495 for SQL Server 2...

CVE-2026-103822 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103825

Substance3D - Designer is vulnerable to an out-of-bounds read (CWE-125) that may lead to the disclosure of sensitive memory. To exploit this vulnerability, an attacker requires user interaction to trick a victim into opening a malicious file . No specific affected versions, root causes, or remedi...

CVE-2026-103825 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103822

Substance3D - Designer is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could exploit this issue to access sensitive information, though it requires user interaction to open a malicious file. No specific exploit detai...