Excessive Memory Allocation in Relative CRLDP Processing
CVE-2026-35189
Excessive Memory Allocation in Relative CRLDP Processing
#windows
共收录 2159 条相关情报。
← 返回所有主题DTLS Retransmits Handshake Messages From a Stale Buffer Offset
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
NULL Pointer Dereference in CMP Client Revocation Response Handling
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response Handling
QUIC STREAM Fragment Metadata DoS
CVE-2026-54873
QUIC STREAM Fragment Metadata DoS
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-96940
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write
CVE-2026-76844
zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
CVE-2026-100419
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
CVE-2026-95519
Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
CVE-2026-95521
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
CVE-2026-67410
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
RabbitMQ: Trust-store whitelist by Issuer+Serial only
CVE-2026-67231
RabbitMQ: Trust-store whitelist by Issuer+Serial only
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
CVE-2026-93834
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
CVE-2026-81627
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Axios: Header Injection via Inherited headers After Minimal Interceptor
CVE-2026-101904
Axios: Header Injection via Inherited headers After Minimal Interceptor
sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
CVE-2026-97058
sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
CVE-2026-101902
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Meth
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
CVE-2026-102278
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion