Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Cod...

CVE-2025-14098

CVE-2025-14098 是 Avira 反病毒引擎在处理畸形 MS-DOS 可执行文件时，由于整数溢出导致堆缓冲区越界写入的漏洞。该漏洞影响 Windows、macOS 和 Linux 平台上的 Avira 反病毒引擎，版本低于 8.

历史摘要 · 未重新核验 · NVD

ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing

## Summary The DER parser used for application-supplied private keys did not safely validate encoded length values befo

历史摘要 · 未重新核验 · GitHub Advisory

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android...

CVE-2026-47223

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.

历史摘要 · 未重新核验 · NVD

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)....

CVE-2026-11774

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(

历史摘要 · 未重新核验 · GitHub Advisory

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet lengt...

CVE-2026-11774

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(

历史摘要 · 未重新核验 · NVD

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can...

CVE-2025-66280

CVE-2025-66280 是一个影响多个 QNAP 操作系统版本的整数溢出或回绕漏洞。该漏洞存在于 QTS、QuTS hero 等多个产品中。攻击者需要先获取管理员账户权限，才能利用该漏洞进一步危害系统安全。QNAP 已在以下版本中修复

历史摘要 · 未重新核验 · NVD

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-34711

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparo

历史摘要 · 未重新核验 · GitHub Advisory

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnera...

CVE-2026-34711

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparo

历史摘要 · 未重新核验 · NVD

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer...

CVE-2026-47925

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnera

历史摘要 · 未重新核验 · GitHub Advisory

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-serv...

CVE-2026-47925

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnera

历史摘要 · 未重新核验 · NVD

The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. This leads to an in...

CVE-2023-29146

The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes trunca

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

CVE-2026-47291

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

CVE-2026-47288

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent networ

历史摘要 · 未重新核验 · NVD

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

CVE-2026-45593

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-45592

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges loc

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-44812

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-44803

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-42974

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code ov

历史摘要 · 未重新核验 · NVD

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42916

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges local

历史摘要 · 未重新核验 · NVD

DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2026-41977

DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.

历史摘要 · 未重新核验 · NVD