dotnet: .NET Framework Remote Code Execution Vulnerability

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the target system over the network. By convincing a user to process specially crafted input, an attacker can trigger memory corruption and compromise the affected...

dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

dotnet: dotnet: Arbitrary code execution via out-of-bounds write

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment...

mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write

A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to...

CVE-2026-112007

A flaw was found in Schism Tracker. An attacker could exploit this vulnerability by enticing a user to open a specially crafted UltraTracker .ult audio file. Due to missing boundary checks on sample counts during file parsing, the application performs an out-of-bounds memory write on the heap. Th...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling

A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-111441

在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLLHEADSIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpys 拷贝输入，既未校验 lenTotal = lenUsed，也将 memcpys 目标大小写成 lenUsed 而非实际分配的...

chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

CVE-2026-111441 HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写

在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLLHEADSIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpys 拷贝输入，既未校验 lenTotal = lenUsed，也将 memcpys 目标大小写成 lenUsed 而非实际分配的...

CVE-2026-111441

The openGauss-server software contains a heap-based buffer overflow vulnerability in the src/gausskernel/cbb/utils/hll/hll.cpp file. The root cause is a validation flaw within the HllObjectUnpack() function, which fails to verify that lenTotal is greater than or equal to lenUsed when unpacking us...

EUVD-2026-104052

在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLLHEADSIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpys 拷贝输入，既未校验 lenTotal = lenUsed，也将 memcpys 目标大小写成 lenUsed 而非实际分配的...

CVE-2026-111441 HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写

在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLLHEADSIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpys 拷贝输入，既未校验 lenTotal = lenUsed，也将 memcpys 目标大小写成 lenUsed 而非实际分配的...

Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...

Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling...

RHEL 10 : kernel (RHSA-2026:85321)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85321 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel...

PT-2026-132899

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode hv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed...

RHEL 9 : xorg-x11-server (RHSA-2026:84574)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84574 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...