48 matches found
BIT-MONGODB-2026-4358 Memory safety issues in slot-based execution hash table spill
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-23354
In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fredextint arrayindexnospec is no use if the result gets spilled to the stack, as it makes the believed safe-under-speculation value subject to memory predictions. For all practical purpose...
CVE-2026-23354
CVE-2026-23354 concerns the Linux kernel x86/fred speculative safety. The fix removes the index variable and repositions array_index_nospec() so it’s calculated immediately before the array access, addressing the incorrect placement that allowed the result to be spilled to the stack across irqent...
EUVD-2026-12639
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-4358
CVE-2026-4358 affects MongoDB's slot-based execution (SBE) engine. A specially crafted aggregation query using $lookup, issued by an authenticated user with write privileges, can trigger a double-free or use-after-free in the in-memory hash table that is spilled to disk, creating a memory-safety ...
CVE-2026-4358 Memory safety issues in slot-based execution hash table spill
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-4358 Memory safety issues in slot-based execution hash table spill
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
CVE-2026-4358 Memory safety issues in slot-based execution hash table spill
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution SBE engine when an in-memory hash table is spilled to disk...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from a memory...
CVE-2025-13779 Configuration Data Spill
Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1...
CVE-2025-13779 Configuration Data Spill
Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1...
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38599)
jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the requested xattr node size is no larger than the eraseblock minus the cleanmarker. Unlike the usual inode nodes, the xattr nodes aren't split into parts and spread across multiple eraseblocks, which means...
bpf: support non-r10 register spill/fill to/from stack in precision tracking
...
Malicious code in test-mlw2-tacet-loony-spill-ulcer (npm)
The package test-mlw2-tacet-loony-spill-ulcer was found to contain malicious code...
Malicious code in @malware-test-corni-spill-babul-chasm/test-mlw3-corni-spill-babul-chasm (npm)
The package @malware-test-corni-spill-babul-chasm/test-mlw3-corni-spill-babul-chasm was found to contain malicious code...
MAL-2025-36396 Malicious code in test-mlw2-tacet-loony-spill-ulcer (npm)
The package test-mlw2-tacet-loony-spill-ulcer was found to contain malicious code...
MAL-2025-8571 Malicious code in @malware-test-corni-spill-babul-chasm/test-mlw3-corni-spill-babul-chasm (npm)
The package @malware-test-corni-spill-babul-chasm/test-mlw3-corni-spill-babul-chasm was found to contain malicious code...
SUSE CVE-2025-3031
An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed in Firefox 137 and Thunderbird 137...