2235 matches found
EUVD-2026-72758
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
CVE-2026-73321
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser . Authenticated attackers can submit a single post with deeply nested BBCode tags sufficient to exceed PHP's stack limit, causing fatal errors that repeatedly terminate PHP-FPM workers for all visitors ren...
CVE-2026-73321 XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
CVE-2026-11573
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
AZL-100947 CVE-2026-11573 affecting package qtbase for versions less than 6.6.3-6
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
DEBIAN-CVE-2026-11573
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
UBUNTU-CVE-2026-11573
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
CVE-2026-11573
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
CVE-2026-11573 QDomDocument::toByteArray() crashes when parsing svg file
Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...
CVE-2026-11573
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
EUVD-2026-72717
Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...
CVE-2026-11573 Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...
CVE-2026-11573
CVE-2026-11573 affects Qt's QtXml module, specifically QDomDocument::toByteArray(). The root cause is uncontrolled recursion when serializing deeply nested untrusted XML (e.g., an SVG file), which exhausts the call stack and crashes the application. The impact is limited to denial of service (ava...
PT-2026-88521
Name of the Vulnerable Software and Affected Versions go-attestation versions prior to 0.6.2 Description An uncontrolled recursion issue in the Windows SIPA event log parser allows a remote attacker to cause a denial of service DoS. The readELAMAggregation function in the WinEvents object recurse...
PT-2026-87041
Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...
CVE-2026-73321: Uncontrolled Recursion
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
PT-2026-87066
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
PT-2026-87416
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to cause a denial of service over a network. Uncontrolled recursion occurs when a functio...
