1714 matches found
CVE-2026-92919
creationtimestamp| type| source ---|---|--- 2026-09-17 14:03:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvpsyx2lyu24 2026-09-17 14:09:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7jeuu4gavo4zo...
PT-2026-95098
Name of the Vulnerable Software and Affected Versions Wire versions prior to 6.4.1 Wire versions prior to 7.0.0-alpha04 Description Wire's Swift runtime fails to reject negative lengths for LENGTH DELIMITED fields when skipping an unknown START GROUP field. A crafted protobuf payload can cause th...
CVE-2026-63126
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...
CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...
CVE-2026-63126
Wire (a gRPC and protocol buffers library by Square for Android, Kotlin, Swift, and Java) has an integer overflow in its 32-bit protobuf decoder. Prior to 6.4.5 and 7.0.0-alpha04 , ByteArrayProtoReader32.internalNextLengthDelimited() in Kotlin allows a positive oversized length to wrap pos + leng...
CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...
CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...
CVE-2026-75029
CVE-2026-75029 affects ISC BIND 9 (versions 9.11.0–9.18.50, 9.20.0–9.20.27, 9.21.0–9.21.25, and corresponding -S1 releases). The message parser fails to deduplicate singleton records (e.g., SOA) in a query response: when an attacker sends multiple copies with identical RDATA, each copy is appende...
CVE-2026-75029 Message parser retains every identical singleton RDATA, enabling wire-to-work amplification
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...
CVE-2026-92248
creationtimestamp| type| source ---|---|--- 2026-09-16 00:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlthy3xlj2e...
CVE-2026-69486
creationtimestamp| type| source ---|---|--- 2026-09-16 00:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlthqp3l52s 2026-09-16 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916 2026-09-16 12:00:07+00:00|...
CVE-2026-63126: Integer Overflow or Wraparound
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...
PT-2026-93801
Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A stream desynchronization issue exists in the AMQP wire-protocol parser. When the readLongstr function in read.go encounters a declared AMQP longstr length exceeding 0x7FFFFFFF the...
CVE-2026-88065
creationtimestamp| type| source ---|---|--- 2026-09-15 22:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmsf7mz42m...
CVE-2026-87289
creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljl4e5ew2o 2026-09-23 08:45:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-87288
creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkvepjn2e...
CVE-2026-87286
creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljh2lpuk2b...
CVE-2026-88975
creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljgt7w5m2s...
CVE-2026-89040
creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljglfa3n24 2026-09-16 01:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlzlkgw752n...