177732 matches found
Ubuntu 24.04 LTS / 26.04 LTS : libheif vulnerabilities (USN-8649-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8649-1 advisory. It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker coul...
PT-2026-111952
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-113282
🚨 CVE-2026-103840 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...
Microsoft Windows: CVE-2026-69884: Windows GDI Elevation of Privilege Vulnerability
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-100131: Out-of-bounds Read
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
PT-2026-113256
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-112239
Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data...
PT-2026-113475
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description The use of an uninitialized variable in the ThirdParty lmza sdk allows a remote attacker to potentially read memory inside the sandbox by using a crafted file. Recommendations Update...
Microsoft Office: CVE-2026-70281: Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
PT-2026-113502
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in Bindings, which allows a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. Use after free is a memory corruption...
UBUNTU-CVE-2026-107821
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...
Microsoft Windows: CVE-2026-97832: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97837: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113260
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83875: Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83521: Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-88169: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-88201: Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...