#cwe-120

共收录 328 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 14...

CVE-2026-92010

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 14...

CVE-2026-92009

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 14...

CVE-2026-92008

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 14...

CVE-2026-92007

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 14...

CVE-2026-92006

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah...

CVE-2026-84632

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted ...

CVE-2026-84581

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 1...

CVE-2026-84489

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image...

CVE-2026-28934

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a s...

CVE-2026-48490

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the b...

CVE-2026-42808

An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Noti...

CVE-2026-87931

A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Im

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function. Fixed in 9a253a07f...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library....

CVE-2026-44756

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted n...

CVE-2026-44756

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-06 发布HIGH

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Exe...

CVE-2026-86166

CVE-2026-86166 是 Tenda HG10 路由器(固件版本 300001138)中存在的一个缓冲区溢出漏洞。漏洞位于 Boa Web Server 组件的 /boaform/formWanRedirect 文件中,具体涉及 f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-06 发布INFO

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument ...

CVE-2026-86165

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulati...

CVE-2026-85110

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/form

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a man...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicu...

CVE-2026-85031

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cste

历史摘要 · 未重新核验 · NVD