Search Results (11370 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-83635 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 7.5 High
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2023-3268 3 Debian, Linux, Redhat 5 Debian Linux, Linux Kernel, Enterprise Linux and 2 more 2026-10-14 7.1 High
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.
CVE-2026-106464 2026-10-14 N/A
`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length of `0xFFFFFFFF` and a signature pointer one byte past the end of the buffer. Certificates are parsed from the peer during the TLS handshake, so the input is remote and unauthenticated.
CVE-2026-110694 1 Oaid 1 Tengine 2026-10-14 6.3 Medium
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-110679 1 Opensips 1 Opensips 2026-10-14 7.3 High
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
CVE-2026-97760 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97844 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97842 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97841 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97840 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97838 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97837 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97836 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97835 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97834 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97833 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97832 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97831 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-10-14 6.5 Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.