CVE-2026-102758 | High | 7.5 | 2026-09-29 | The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all X… |
CVE-2026-102728 | High | 7.5 | 2026-09-29 | Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to conta… |
CVE-2026-96420 | Medium | 4.7 | 2026-09-29 | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95392 | Medium | 5.5 | 2026-09-29 | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-97399 | Low | 3.7 | 2026-09-28 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cra… |
CVE-2026-94286 | High | 7.1 | 2026-09-28 | An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. |
CVE-2026-86243 | High | 7.5 | 2026-09-23 | Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.
This issue affect… |
CVE-2026-25294 | High | 7.4 | 2026-09-17 | Transient DOS while parsing frame during channel usage. |
CVE-2026-25284 | High | 7.3 | 2026-09-17 | Information Disclosure when a pointer is reused after being deallocated. |
CVE-2026-25275 | High | 7.5 | 2026-09-17 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
CVE-2026-24081 | High | 7.4 | 2026-09-17 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
CVE-2026-24075 | High | 7.8 | 2026-09-17 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
CVE-2026-90610 | Low | 3.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4… |
CVE-2026-76653 | | | 2026-09-10 | A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper a… |
CVE-2026-83951 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83949 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-81399 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-78516 | Medium | 4.3 | 2026-09-08 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
CVE-2026-73029 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-72974 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72932 | High | 7.5 | 2026-09-08 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69794 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
CVE-2026-69719 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69626 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69610 | High | 7.0 | 2026-09-08 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69582 | High | 7.8 | 2026-09-08 | Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69474 | Medium | 4.8 | 2026-09-08 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
CVE-2026-69416 | Medium | 5.7 | 2026-09-08 | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69316 | Medium | 4.7 | 2026-09-08 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-68875 | High | 7.8 | 2026-09-08 | Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-68851 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-67393 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67390 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-18238 | Medium | 5.0 | 2026-09-05 | The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a craf… |
CVE-2026-84640 | High | 7.5 | 2026-09-01 | A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140… |
CVE-2026-70652 | | | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an outpu… |
CVE-2026-53587 | High | 7.5 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your a… |
CVE-2026-76885 | Low | 3.1 | 2026-08-19 | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-76884 | Low | 3.1 | 2026-08-19 | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-69550 | Medium | 6.5 | 2026-08-19 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-65936 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the relate… |
CVE-2026-65933 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper bel… |
CVE-2026-18024 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value… |
CVE-2026-14678 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory v… |
CVE-2026-68819 | Medium | 5.9 | 2026-08-11 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. |
CVE-2026-65794 | Medium | 6.5 | 2026-08-11 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62793 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-62746 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62730 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
CVE-2026-61350 | Medium | 4.6 | 2026-08-11 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-61347 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
CVE-2026-53414 | Medium | 6.5 | 2026-08-11 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on… |
CVE-2026-20311 | Medium | 6.3 | 2026-08-05 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a den… |
CVE-2026-25288 | High | 7.4 | 2026-08-04 | Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size. |
CVE-2026-66312 | Medium | 6.5 | 2026-08-04 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2026-55970 | Medium | 6.5 | 2026-07-27 | Buffer Over-read vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to upgrade to version 0… |
CVE-2026-55238 | Medium | 5.3 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capa… |
CVE-2026-63091 | Medium | 6.5 | 2026-07-20 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated… |
CVE-2026-47088 | Low | 3.1 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could cr… |
CVE-2026-62353 | Medium | 5.4 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented p… |
CVE-2026-49854 | Medium | 5.3 | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mas… |
CVE-2026-57968 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-55036 | High | 7.8 | 2026-07-14 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-50504 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50485 | Medium | 4.5 | 2026-07-14 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-50475 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50468 | Medium | 6.5 | 2026-07-14 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-50445 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50435 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-50402 | High | 7.8 | 2026-07-14 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50383 | Medium | 6.1 | 2026-07-14 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-50372 | High | 7.0 | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
CVE-2026-50341 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-59840 | Medium | 4.3 | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fort… |
CVE-2025-43892 | Medium | 4.3 | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fort… |
CVE-2026-50813 | Medium | 6.1 | 2026-07-08 | An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/chang… |
CVE-2026-21379 | High | 7.8 | 2026-07-06 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. |
CVE-2026-58013 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length… |
CVE-2026-58012 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacemen… |
CVE-2026-58010 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padd… |
CVE-2026-41992 | High | 7.5 | 2026-06-29 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decom… |
CVE-2026-40210 | Medium | 4.8 | 2026-06-25 | An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. |
CVE-2026-45460 | Medium | 4.7 | 2026-06-09 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-42828 | High | 7.8 | 2026-06-09 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-11787 | Medium | 5.0 | 2026-06-09 | A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer… |
CVE-2026-44185 | High | 7.3 | 2026-06-08 | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server
This issue affects Apache HTTP Server: f… |
CVE-2026-45684 | Medium | 4.9 | 2026-06-02 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enr… |
CVE-2025-59609 | Medium | 5.5 | 2026-06-01 | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
CVE-2026-5260 | High | 8.2 | 2026-05-26 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed… |
CVE-2026-6575 | Medium | 4.3 | 2026-05-14 | Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of… |
CVE-2026-8463 | Medium | 5.3 | 2026-05-13 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input.
The auto-detect form of arg… |
CVE-2025-47406 | Medium | 6.1 | 2026-05-04 | Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. |
CVE-2025-47403 | Medium | 6.5 | 2026-05-04 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
CVE-2025-47401 | Medium | 6.5 | 2026-05-04 | Transient DOS when processing target power rate tables during channel configuration. |
CVE-2026-34059 | High | 7.5 | 2026-05-04 | Buffer Over-read vulnerability in Apache HTTP Server.
This issue affects Apache HTTP Server: through 2.4.66.
Users are recommended to upgrade to version 2.4… |
CVE-2026-37532 | High | 7.1 | 2026-05-01 | AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-89), the payload_le… |
CVE-2026-6532 | Medium | 5.5 | 2026-04-30 | Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CVE-2026-6238 | Medium | 6.5 | 2026-04-28 | The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against th… |
CVE-2026-41898 | Medium | 5.3 | 2026-04-24 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk… |