#cwe-190

共收录 699 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-70258

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

CVE-2026-70149

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an aut

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

CVE-2026-70052

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69966

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locall

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-105715

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102856

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, ac...

CVE-2026-54697

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readL

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing

CVE-2026-54697

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readL

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redi...

CVE-2026-109938

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to b...

CVE-2025-58771

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Succ

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update

CVE-2026-109938

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19...

CVE-2026-97229

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布CRITICAL

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-97229

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 1

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-13 发布INFO

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overf...

CVE-2026-35001

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap me...

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-10 发布INFO

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_thet...

CVE-2026-103635

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). com

历史摘要 · 未重新核验 · NVD

安全公告2026-10-10 发布INFO

Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch

CVE-2026-103635

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). com

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig pars...

CVE-2026-107820

x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow

CVE-2026-107820

x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional

历史摘要 · 未重新核验 · OSV.dev