共收录 128 条相关情报。
← 返回所有主题CVE-2026-93524
A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authen
CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-55606
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHC
CVE-2026-112394
### Summary On `main`, even with the guard in #9725, it's possible to have these decoders read 1 to 3 bytes past the en
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due
CVE-2026-112404
``` ============================================================================ OOB read in TiffDecode.c tile and RGBA
CVE-2026-112404
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond ro
CVE-2026-112394
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an inp
CVE-2026-85935
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-83788
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-83727
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83719
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-83685
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
CVE-2026-83565
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-70234
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-103567
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-96394
The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions agains
CVE-2026-101130
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when pars
CVE-2026-101094
The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 characte