Total
9747 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-40454 | 2026-07-10 | N/A | 7.5 HIGH | ||
| Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malformed server data. This issue affects Apache IoTDB C++ client: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue. | |||||
| CVE-2026-14740 | 1 Perl | 1 Dbi | 2026-07-10 | N/A | 9.1 CRITICAL |
| DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byte. The result is a fault on memory-hardened builds and nondeterministic newline retention on normal builds. | |||||
| CVE-2026-15114 | 1 Google | 1 Chrome | 2026-07-10 | N/A | 8.8 HIGH |
| Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: High) | |||||
| CVE-2026-50811 | 2026-07-09 | N/A | 6.5 MEDIUM | ||
| An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates | |||||
| CVE-2026-58307 | 2026-07-09 | N/A | 6.1 MEDIUM | ||
| Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee22f5c7b8bf31cb7252d7731fae8c07f2842c. | |||||
| CVE-2026-58304 | 2026-07-09 | N/A | 6.1 MEDIUM | ||
| Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b4708b84a. | |||||
| CVE-2026-15185 | 2026-07-09 | 1.7 LOW | 3.3 LOW | ||
| A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/media_tools/vobsub.c of the component MP4Box. Executing a manipulation of the argument num_langs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called 532097084729a936bcdf6a27c41003f3bd7dc3ff. It is best practice to apply a patch to resolve this issue. Two different commits were applied to fix this issue. | |||||
| CVE-2026-38973 | 2026-07-09 | N/A | 4.4 MEDIUM | ||
| mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find_method(). | |||||
| CVE-2026-58469 | 1 Gnu | 1 Wget | 2026-07-09 | N/A | 7.5 HIGH |
| GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior. | |||||
| CVE-2026-38971 | 1 Ardupilot | 1 Arduplane | 2026-07-09 | N/A | 9.1 CRITICAL |
| ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control(). | |||||
| CVE-2026-56374 | 1 Imagemagick | 1 Imagemagick | 2026-07-09 | N/A | 3.3 LOW |
| ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure. | |||||
| CVE-2026-57258 | 3 Apple, Foxit, Microsoft | 4 Macos, Pdf Editor, Pdf Reader and 1 more | 2026-07-09 | N/A | 6.1 MEDIUM |
| The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out-of-bounds reads and application crashes. | |||||
| CVE-2026-57241 | 2 Foxit, Microsoft | 3 Pdf Editor, Pdf Reader, Windows | 2026-07-09 | N/A | 6.1 MEDIUM |
| The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose synchronization; however, the renderer still trusts the outdated page count, and eventually the application crashes due to out-of-bounds access. | |||||
| CVE-2026-57257 | 3 Apple, Foxit, Microsoft | 4 Macos, Pdf Editor, Pdf Reader and 1 more | 2026-07-09 | N/A | 6.1 MEDIUM |
| During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes. | |||||
| CVE-2026-57243 | 2 Foxit, Microsoft | 3 Pdf Editor, Pdf Reader, Windows | 2026-07-09 | N/A | 6.1 MEDIUM |
| During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash. | |||||
| CVE-2026-57253 | 2 Foxit, Microsoft | 3 Pdf Editor, Pdf Reader, Windows | 2026-07-09 | N/A | 6.1 MEDIUM |
| An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, resulting in the application crashing. | |||||
| CVE-2026-57255 | 2 Foxit, Microsoft | 3 Pdf Editor, Pdf Reader, Windows | 2026-07-09 | N/A | 6.1 MEDIUM |
| The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated; when subsequently read, it produces an illegal pointer that accesses an out-of-bounds region, crashing the application. | |||||
| CVE-2026-44041 | 1 Uvnc | 1 Ultravnc | 2026-07-09 | N/A | 4.3 MEDIUM |
| UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function passes a caller-supplied WCHAR pointer to wcslen() before any bounds check. If the caller provides a wide-character buffer that is not properly NUL-terminated, wcslen() reads past the end of the buffer until it encounters a NUL wchar, resulting in an out-of-bounds read. Under typical Win32 API usage this requires an abnormal caller contract. Impact is limited to a potential information disclosure from adjacent memory regions or a process crash (denial of service) if the over-read crosses a page boundary. | |||||
| CVE-2024-33270 | 2026-07-09 | N/A | 7.5 HIGH | ||
| An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php component. | |||||
| CVE-2024-23086 | 1 Mikkotommila | 1 Apfloat | 2026-07-09 | N/A | 9.8 CRITICAL |
| Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification. | |||||