#cwe-763

共收录 20 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布LOW

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without...

CVE-2026-119341

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

CVE-2026-112893

### Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-19 发布HIGH

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, ...

CVE-2026-112893

Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType r

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85850

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-85362

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate p

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-83908

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83735

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-09-29 发布INFO

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布HIGH

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document ...

CVE-2026-74860

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providin

来源摘录 · NVD

安全公告2026-09-08 发布INFO

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free...

CVE-2026-16005

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craft

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, ...

CVE-2026-16005

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craft

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Th...

CVE-2026-84131

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Fire

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged...

CVE-2023-20511

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execu...

CVE-2023-20511

Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted netw...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Fire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result, due to the damage ...

CVE-2026-57248

When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Florian Westphal says: "Historically this is not an issue, ev...

CVE-2026-53000

In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flori

来源摘录 · NVD

漏洞预警2026-06-03 发布INFO

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, de...

CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf...

CVE-2026-47312

Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This

历史摘要 · 未重新核验 · NVD