#cwe-787

共收录 1336 条相关情报。

← 返回所有主题

漏洞预警2026-07-16 发布INFO

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting i...

CVE-2026-61389

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-16 发布INFO

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting i...

CVE-2026-60063

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-16 发布INFO

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs d...

CVE-2026-15422

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-787

漏洞预警2026-07-16 发布INFO

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

CVE-2026-10589

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Manageme

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-16 发布INFO

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management setting

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

安全公告2026-07-16 发布INFO

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual...

CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787 #severity:high

漏洞预警2026-07-16 发布INFO

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memo...

CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

安全公告2026-07-16 发布INFO

Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write

CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-787

安全公告2026-07-15 发布INFO

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients...

CVE-2026-40953

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787 #severity:medium

漏洞预警2026-07-15 发布INFO

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an o...

CVE-2026-50144

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-129 #cwe-787

漏洞预警2026-07-15 发布INFO

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can crea...

CVE-2026-40953

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-07-15 发布INFO

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for...

CVE-2026-62349

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, sourc

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-787

漏洞预警2026-07-15 发布INFO

The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by copying devi...

CVE-2026-10673

The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ether

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

安全公告2026-07-15 发布INFO

Out-of-bounds write in ADIN2111/ADIN1110 OA SPI Ethernet RX frame reassembly

CVE-2026-10673

The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ether

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-787

安全公告2026-07-15 发布INFO