23530 matches found
GNU Binutils objdump.c disassemble_bytes stack-based overflow
...
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
...
Chromium: CVE -2025-0995 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE -2025-0998 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE -2025-0997 Use after free in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE -2025-0996 Inappropriate implementation in Browser UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Undici Uses Insufficiently Random Values
...
A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.
...
gzip integer overflow
...
twisted.web has disordered HTTP pipeline response
...
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
...
Sensitive headers incorrectly sent after cross-domain redirect in net/http
...
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
...
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice
...
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.
...
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
...
Windows Active Directory Domain Services API Denial of Service Vulnerability
...
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
...
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
...
Vulnerability when creating log files in github.com/golang/glog
...
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.
...
Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_datastream::gets(char*, int) in /src/libraw/src/libraw_datastream.cpp.
...
Windows Installer Elevation of Privilege Vulnerability
...
Microsoft PC Manager Elevation of Privilege Vulnerability
...
Windows Core Messaging Elevation of Privileges Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Core Messaging Elevation of Privileges Vulnerability
...
Windows Telephony Service Remote Code Execution Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Windows Telephony Service Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Telephony Service Remote Code Execution Vulnerability
...
Windows NTFS Elevation of Privilege Vulnerability
...
Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Storage Elevation of Privilege Vulnerability
...
Visual Studio Installer Elevation of Privilege Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Microsoft Outlook Spoofing Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
...
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...