#cwe-123

共收录 16 条相关情报。

← 返回所有主题

漏洞预警2026-10-27 发布INFO

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitra...

CVE-2026-92372

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-09-22 发布INFO

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

CVE-2026-25262

Memory corruption while processing a crafted ELF file in the Primary Bootloader.

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-09-21 发布HIGH

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_...

CVE-2026-94142

该漏洞影响 BioStar Temperature Monitor Utility 1.2.1806.2200 版本所附带的内核驱动 BS_HWMIO64_W10.sys。问题出在该驱动的 IOCTL(设备输入输出控制)处理路径上,具体位于

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-123

漏洞预警2026-09-21 发布HIGH

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCTL Handl...

CVE-2026-94129

该漏洞影响 BioStar VALKYRIE AURORA 2.10.2411.0800 中的内核驱动文件 BS_RVSIO64.sys。其 IOCTL 处理链路中的函数 sub_1105C 在解析用户态传入的 IOCTL 请求时，未对参数

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-123

漏洞预警2026-09-21 发布HIGH

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Handler. Th...

CVE-2026-94128

该漏洞影响 BioStar VIVID LED DJ 4.0.2411.1500 版本随附的内核驱动 BS_LED64.sys，问题出在其 IOCTL 处理组件中的函数 sub_1105C。当低权限本地进程向该驱动发送特制的 IOCTL 请

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-123

漏洞预警2026-09-17 发布INFO

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonposi...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-123 #cwe-823 #cwe-1284

漏洞预警2026-08-27 发布INFO

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-w...

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

安全公告2026-08-03 发布INFO

In trusted_mem, there is a possible escalation of privilege due to improper input validation....

CVE-2026-20469

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-123

漏洞预警2026-08-03 发布MEDIUM

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already o...

CVE-2026-20469

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e

来源摘录 · NVD

#cve #cwe-123

安全公告2026-07-14 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where...

CVE-2026-47473

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful ex

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-123 #severity:high

漏洞预警2026-07-14 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering,...

CVE-2026-47473

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-06-26 发布INFO

The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data pl...

CVE-2026-45257

The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and s

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-06-15 发布INFO

remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.

CVE-2026-30121

remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-05-23 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @...

CVE-2026-46300

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

来源摘录 · NVD

#cve #cwe-123 #cwe-456 #cwe-787

漏洞预警2026-05-08 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directl...

CVE-2026-43284

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb fra

历史摘要 · 未重新核验 · NVD

#cve #cwe-123

漏洞预警2026-04-29 发布INFO

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect ...

CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP

历史摘要 · 未重新核验 · NVD

#cve #cwe-123