Total
580 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-97828 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-10-16 | N/A | 6.5 MEDIUM |
| Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | |||||
| CVE-2026-95904 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-10-16 | N/A | 5.5 MEDIUM |
| Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-101310 | 2026-10-16 | N/A | 7.0 HIGH | ||
| The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious guest can crash the bhyve process or potentially execute arbitrary code in the host userspace context running the virtual machine, subject to bhyve's Capsicum sandbox. | |||||
| CVE-2026-88167 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 6.5 MEDIUM |
| Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2025-62560 | 1 Microsoft | 5 365 Apps, Excel, Office and 2 more | 2026-10-14 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-88195 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | N/A | 6.5 MEDIUM |
| Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-88201 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | N/A | 6.5 MEDIUM |
| Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-85835 | 2026-10-13 | N/A | 5.5 MEDIUM | ||
| Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | |||||
| CVE-2025-4582 | 1 Rti | 1 Connext Professional | 2026-10-11 | N/A | 7.1 HIGH |
| Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.1.43, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.4a before 5.1.*. | |||||
| CVE-2026-20541 | 1 Mediatek | 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more | 2026-10-09 | N/A | 5.3 MEDIUM |
| In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911. | |||||
| CVE-2026-20540 | 1 Mediatek | 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more | 2026-10-09 | N/A | 5.3 MEDIUM |
| In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912. | |||||
| CVE-2026-20539 | 1 Mediatek | 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more | 2026-10-09 | N/A | 5.3 MEDIUM |
| In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913. | |||||
| CVE-2026-20538 | 1 Mediatek | 166 Mt2716, Mt2716 Firmware, Mt2735 and 163 more | 2026-10-09 | N/A | 5.3 MEDIUM |
| In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914. | |||||
| CVE-2026-96394 | 2026-10-09 | N/A | 2.9 LOW | ||
| The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed or previewed by a user in Finder, could disclose the contents of adjacent heap memory in the rendered thumbnail or preview image, or cause the thumbnail or preview extension to crash. | |||||
| CVE-2026-101130 | 2026-10-09 | N/A | 3.6 LOW | ||
| The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could disclose the contents of adjacent heap memory in the document's text or result in an application crash. | |||||
| CVE-2026-101094 | 2026-10-09 | N/A | 3.6 LOW | ||
| The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could disclose the contents of adjacent heap memory in the document's text or result in an application crash. | |||||
| CVE-2026-57546 | 1 Qualcomm | 28 Congo, Congo Firmware, Fastconnect 7800 and 25 more | 2026-10-09 | N/A | 7.5 HIGH |
| Transient DOS when processing a continuous receive command with a zero-sized global configuration override. | |||||
| CVE-2025-55093 | 1 Eclipse | 1 Threadx Netx Duo | 2026-10-09 | N/A | 5.3 MEDIUM |
| In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory. | |||||
| CVE-2025-55092 | 1 Eclipse | 1 Threadx Netx Duo | 2026-10-09 | N/A | 5.3 MEDIUM |
| In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option. | |||||
| CVE-2022-2175 | 2 Fedoraproject, Vim | 2 Fedora, Vim | 2026-10-08 | 6.8 MEDIUM | 7.8 HIGH |
| Buffer Over-read in GitHub repository vim/vim prior to 8.2. | |||||