共收录 1565 条相关情报。
← 返回所有主题CVE-2026-113010
Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside
CVE-2026-113006
Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execut
CVE-2026-112896
## Summary A small attacker-supplied TIFF can be opened and loaded normally, then reach an out-of-bounds read when an a
CVE-2026-112404
``` ============================================================================ OOB read in TiffDecode.c tile and RGBA
CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was va
CVE-2026-100132
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A
CVE-2026-95109
The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The c
CVE-2026-94202
The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memo
CVE-2026-94024
The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much
CVE-2026-94023
A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one q
CVE-2026-92853
The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first
CVE-2026-92843
A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger
CVE-2026-91057
`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the stri
CVE-2026-96402
A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, le
CVE-2026-95111
A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of
CVE-2026-92454
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what
CVE-2026-92446
`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BI
CVE-2026-91186
The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has al
CVE-2026-91059
The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header aft
CVE-2026-96582
A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host w