23105 matches found
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally...
Performance Counters for Windows Elevation of Privilege Vulnerability
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally...
Azure IoT Explorer Information Disclosure Vulnerability
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CoreDNS Loop Detection Denial of Service Vulnerability
...
CoreDNS ACL Bypass
...
MariaDB Server Audit Plugin Comment Handling Bypass
...
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
...
Chromium: CVE-2026-3545 Insufficient data validation in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3543 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3541 Inappropriate implementation in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3539 Object lifecycle issue in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3538 Integer overflow in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3536 Integer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
Microsoft ACI Confidential Containers Information Disclosure Vulnerability
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
Microsoft Devices Pricing Program Remote Code Execution Vulnerability
...
Payment Orchestrator Service Elevation of Privilege Vulnerability
...
Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
...
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
...
scsi: qla2xxx: Fix bsg_done() causing double free
...
romfs: check sb_set_blocksize() return value
...
platform/x86: classmate-laptop: Add missing NULL pointer checks
...
fbdev: smscufx: properly copy ioctl memory to kernelspace
...
Bytes is vulnerable to integer overflow in BytesMut::reserve
...
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
...
Vim has stack-buffer-overflow in build_stl_str_hl()
...
Vim has Heap-based Buffer Underflow in Emacs tags parsing
...
Vim has Heap-based Buffer Overflow in Emacs tags parsing
...
Vim has Heap-based Buffer Overflow and OOB Read in :terminal
...
Vim has a heap-buffer-overflow and a segmentation fault
...
Vim has OS Command Injection in netrw
...
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data.
...
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
...
net/sched: sch_qfq: do not free existing class in qfq_change_class()
...
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
...
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
...
libceph: return the handler error from mon_handle_auth_done()
...
libceph: make free_choose_arg_map() resilient to partial allocation
...
libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
...
libceph: prevent potential out-of-bounds reads in handle_auth_done()
...
net: mscc: ocelot: Fix crash when adding interface under a lag
...