#cwe-190

共收录 699 条相关情报。

← 返回所有主题
漏洞预警2026-09-11 发布INFO

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.

CVE-2026-89158

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.

CVE-2026-89157

PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file cont

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-11 发布INFO

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow i...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file cont

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows...

CVE-2026-16174

Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful expl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged ...

CVE-2026-16174

Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful expl

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone local: crafted Range request against a translated symlink panics (DoS)

CVE-2026-88015

### Summary When `backend/local` is used with `--links`/`-l` (or the `links=true` config option), each symlink is expose

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small...

CVE-2026-88035

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated ...

CVE-2026-85228

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Integer overflow in tensor buffer validation in Deep Java Library

CVE-2026-85228

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-10 发布INFO

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes s...

CVE-2026-88015

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone local: crafted Range request against a translated symlink panics (DoS)

CVE-2026-88015

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-09 发布INFO

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote...

CVE-2026-87643

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...

CVE-2026-87630

Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布HIGH

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69499

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a netwo

来源摘录 · NVD

漏洞预警2026-09-08 发布MEDIUM

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69469

CVE-2026-69469 是 Microsoft Windows USB Audio Class 驱动程序 usbaudio.sys 中存在的一个整数溢出或回绕漏洞。该漏洞源于驱动程序在处理音频类请求时,对相关长度或数值的边界检查不足,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69408

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code ove

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69407

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69373

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVE-2026-69329

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

历史摘要 · 未重新核验 · NVD