CVE-2026-108454 | Medium | 6.5 | 2026-10-15 | Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-101310 | High | 7.0 | 2026-10-15 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bou… |
CVE-2026-97828 | Medium | 6.5 | 2026-10-13 | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
CVE-2026-96851 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
CVE-2026-96848 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
CVE-2026-95904 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
CVE-2026-88201 | Medium | 6.5 | 2026-10-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-88195 | Medium | 6.5 | 2026-10-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-88167 | Medium | 6.5 | 2026-10-13 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-85935 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. |
CVE-2026-85910 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. |
CVE-2026-85835 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
CVE-2026-83888 | Medium | 6.5 | 2026-10-13 | Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-83835 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
CVE-2026-83788 | Medium | 4.6 | 2026-10-13 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-83727 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-83719 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
CVE-2026-83685 | Medium | 6.5 | 2026-10-13 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
CVE-2026-83565 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
CVE-2026-70234 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
CVE-2026-70041 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
CVE-2026-69957 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69954 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-69953 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69950 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69942 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
CVE-2026-69884 | High | 7.8 | 2026-10-13 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
CVE-2026-103567 | Medium | 5.5 | 2026-10-13 | Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
CVE-2026-96394 | Low | 2.9 | 2026-10-09 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when gener… |
CVE-2026-101130 | Low | 3.6 | 2026-10-09 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity docum… |
CVE-2026-101094 | Low | 3.6 | 2026-10-09 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affini… |
CVE-2026-57546 | High | 7.5 | 2026-10-06 | Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
CVE-2026-20541 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rog… |
CVE-2026-20540 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20539 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue b… |
CVE-2026-20538 | Medium | 5.3 | 2026-10-05 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rog… |
CVE-2026-102758 | High | 7.5 | 2026-09-29 | The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all X… |
CVE-2026-102728 | High | 7.5 | 2026-09-29 | Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to conta… |
CVE-2026-96420 | Medium | 4.7 | 2026-09-29 | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95392 | Medium | 5.5 | 2026-09-29 | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-97399 | Low | 3.7 | 2026-09-28 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cra… |
CVE-2026-94286 | High | 7.1 | 2026-09-28 | An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. |
CVE-2026-86243 | High | 7.5 | 2026-09-23 | Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.
This issue affect… |
CVE-2026-25294 | High | 7.4 | 2026-09-17 | Transient DOS while parsing frame during channel usage. |
CVE-2026-25284 | High | 7.3 | 2026-09-17 | Information Disclosure when a pointer is reused after being deallocated. |
CVE-2026-25275 | High | 7.5 | 2026-09-17 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
CVE-2026-24081 | High | 7.4 | 2026-09-17 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
CVE-2026-24075 | High | 7.8 | 2026-09-17 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
CVE-2026-90610 | Low | 3.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4… |
CVE-2026-76653 | | | 2026-09-10 | A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper a… |
CVE-2026-83951 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83949 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-81399 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-78516 | Medium | 4.3 | 2026-09-08 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
CVE-2026-73029 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-72974 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72932 | High | 7.5 | 2026-09-08 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69794 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
CVE-2026-69719 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69626 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69610 | High | 7.0 | 2026-09-08 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69582 | High | 7.8 | 2026-09-08 | Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69474 | Medium | 4.8 | 2026-09-08 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
CVE-2026-69416 | Medium | 5.7 | 2026-09-08 | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69316 | Medium | 4.7 | 2026-09-08 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-68875 | High | 7.8 | 2026-09-08 | Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-68851 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-67393 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67390 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-18238 | Medium | 5.0 | 2026-09-05 | The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a craf… |
CVE-2026-84640 | High | 7.5 | 2026-09-01 | A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140… |
CVE-2026-70652 | | | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an outpu… |
CVE-2026-53587 | High | 7.5 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your a… |
CVE-2026-76885 | Low | 3.1 | 2026-08-19 | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76884 | Low | 3.1 | 2026-08-19 | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-69550 | Medium | 6.5 | 2026-08-19 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-65936 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the relate… |
CVE-2026-65933 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper bel… |
CVE-2026-18024 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value… |
CVE-2026-14678 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory v… |
CVE-2026-68819 | Medium | 5.9 | 2026-08-11 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. |
CVE-2026-65794 | Medium | 6.5 | 2026-08-11 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62793 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-62746 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62730 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
CVE-2026-61350 | Medium | 4.6 | 2026-08-11 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-61347 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
CVE-2026-53414 | Medium | 6.5 | 2026-08-11 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on… |
CVE-2026-20311 | Medium | 6.3 | 2026-08-05 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a den… |
CVE-2026-25288 | High | 7.4 | 2026-08-04 | Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size. |
CVE-2026-66312 | Medium | 6.5 | 2026-08-04 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2026-55970 | Medium | 6.5 | 2026-07-27 | Buffer Over-read vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to upgrade to version 0… |
CVE-2026-55238 | Medium | 5.3 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capa… |
CVE-2026-63091 | Medium | 6.5 | 2026-07-20 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated… |
CVE-2026-47088 | Low | 3.1 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could cr… |
CVE-2026-62353 | Medium | 5.4 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented p… |
CVE-2026-49854 | Medium | 5.3 | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mas… |
CVE-2026-57968 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-55036 | High | 7.8 | 2026-07-14 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |