Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass
CVE-2026-58662
Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass
#microsoft
共收录 2304 条相关情报。
← 返回所有主题No Title
CVE-2026-64532
No Title
net: openvswitch: reject oversized nested action attrs
CVE-2026-64531
net: openvswitch: reject oversized nested action attrs
fs/ntfs3: validate lcns_follow in log_replay conversion
CVE-2026-64533
fs/ntfs3: validate lcns_follow in log_replay conversion
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
CVE-2026-64536
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
No Title
CVE-2026-58040
No Title
No Title
CVE-2026-58043
No Title
No Title
CVE-2026-58039
No Title
No Title
CVE-2026-56847
No Title
No Title
CVE-2026-56850
No Title
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
CVE-2026-55737
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
CVE-2026-58227
TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
No Title
CVE-2026-59251
No Title
epmd permanent DoS via EMFILE on accept(2) in erts
CVE-2026-42792
epmd permanent DoS via EMFILE on accept(2) in erts
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
CVE-2026-55953
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
No Title
CVE-2026-7260
No Title
No Title
CVE-2026-17543
No Title
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
CVE-2026-64557
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
perf/core: Detach event groups during remove_on_exec
CVE-2026-64556
perf/core: Detach event groups during remove_on_exec
XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
CVE-2026-15037
XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization