#cwe-682

共收录 40 条相关情报。

← 返回所有主题
漏洞预警2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20275

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercent...

CVE-2026-54754

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/ka

历史摘要 · 未重新核验 · NVD

安全公告2026-08-18 发布INFO

Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...

CVE-2026-76043

Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-18 发布INFO

Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-76043

Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary ...

CVE-2026-20763

Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20270

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-01 发布INFO

The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char * name table after a faulty bounds check. The guard u...

CVE-2026-10773

The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifications we...

CVE-2026-64388

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensi

来源摘录 · NVD

漏洞预警2026-07-21 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded gri...

CVE-2026-47247

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak p

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

CVE-2026-47247

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak p

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same register operation For lshift and rshift, the shift operat...

CVE-2026-64006

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same re

来源摘录 · NVD

漏洞预警2026-07-01 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buf...

CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the ...

CVE-2026-10512

The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may a...

CVE-2026-44074

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when mu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limit...

CVE-2026-7836

An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handl

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that...

CVE-2023-7346

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting ...

CVE-2023-7346

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit ...

CVE-2026-44498

ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, Zebra's block validator undercounts transparent

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

Zebra's Block Validator Undercounts Coinbase and P2SH Sigops

CVE-2026-44498

Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (`MAX_BLOCK_SIG

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn encounters a BPF_STX ...

CVE-2026-43009

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch prec

来源摘录 · NVD