Total
9711 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-86564 | 2026-09-09 | N/A | 3.3 LOW | ||
| A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash. | |||||
| CVE-2026-69637 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-09 | N/A | 5.7 MEDIUM |
| Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | |||||
| CVE-2026-69679 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-09 | N/A | 5.7 MEDIUM |
| Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | |||||
| CVE-2026-69342 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-09 | N/A | 7.5 HIGH |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-86227 | 2026-09-09 | 2.1 LOW | 3.1 LOW | ||
| A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 4691888e7fab3df128f0bde5750c9fde2ae552fa. To fix this issue, it is recommended to deploy a patch. Exploitation requires cluster mode plus attacker-controlled dump.rdb at startup (data-dir write access, replication feed, or a stored crafted RDB) - an attacker-position DoS at boot, not network pre-auth. The issue report was closed stating it "is worth fixing for the sake of memory safety… but I don't think it meets our bar for a security disclosure." | |||||
| CVE-2026-81400 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-73434 | 2 Gstreamer, Redhat | 2 Gstreamer, Enterprise Linux | 2026-09-09 | N/A | 6.1 MEDIUM |
| A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_field_desc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072). | |||||
| CVE-2026-81956 | 1 Microsoft | 8 365 Apps, Excel, Microsoft 365 and 5 more | 2026-09-09 | N/A | 7.8 HIGH |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-81957 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 7.8 HIGH |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-85875 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-24225 | 1 Nvidia | 2 Dgx Spark, Dgx Spark Uefi | 2026-09-09 | N/A | 6.0 MEDIUM |
| NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure. | |||||
| CVE-2026-41607 | 1 Apache | 1 Thrift | 2026-09-09 | N/A | 6.5 MEDIUM |
| Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. | |||||
| CVE-2026-41604 | 1 Apache | 1 Thrift | 2026-09-09 | N/A | 8.2 HIGH |
| Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. | |||||
| CVE-2026-81395 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-81393 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-81392 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-81390 | 1 Microsoft | 8 365 Apps, Excel, Microsoft 365 and 5 more | 2026-09-09 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-78518 | 1 Microsoft | 7 365 Apps, Excel, Microsoft 365 and 4 more | 2026-09-09 | N/A | 8.8 HIGH |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-78515 | 1 Microsoft | 6 365 Apps, Microsoft 365, Office 2016 and 3 more | 2026-09-09 | N/A | 6.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-72952 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. | |||||