Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
#microsoft
共收录 2274 条相关情报。
← 返回所有主题Libsoup: libsoup: heap buffer overflow during websocket message reassembly
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
CVE-2026-102560
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Integer Overflow or Wraparound and Out-of-bounds Write in compress
CVE-2026-63209
Integer Overflow or Wraparound and Out-of-bounds Write in compress
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
CVE-2026-101276
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
CVE-2026-72897
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
CVE-2026-84784
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
Timing Side-Channel in SM2 Signature Generation
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation
QUIC Unvalidated Amplification Credit may be Over Accounted
CVE-2026-35191
QUIC Unvalidated Amplification Credit may be Over Accounted
QUIC Connection-Level Flow Control is Not Enforced for Streams
CVE-2026-75804
QUIC Connection-Level Flow Control is Not Enforced for Streams
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
CVE-2026-42772
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
CVE-2026-54875
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
CVE-2026-54872
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
Excessive Memory Allocation in Relative CRLDP Processing
CVE-2026-35189
Excessive Memory Allocation in Relative CRLDP Processing
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
NULL Pointer Dereference in CMP Client Revocation Response Handling
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response Handling
QUIC STREAM Fragment Metadata DoS
CVE-2026-54873
QUIC STREAM Fragment Metadata DoS
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-96940
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write
CVE-2026-76844
zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write