Total
15356 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-13053 | 1 Watchguard | 39 Firebox M270, Firebox M290, Firebox M295 and 36 more | 2026-10-25 | N/A | 7.2 HIGH |
| An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command. | |||||
| CVE-2026-13050 | 1 Watchguard | 39 Firebox Cloud, Firebox M270, Firebox M290 and 36 more | 2026-10-25 | N/A | 7.2 HIGH |
| An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI. | |||||
| CVE-2026-14063 | 4 Apple, Google, Linux and 1 more | 4 Macos, Chrome, Linux Kernel and 1 more | 2026-10-25 | N/A | 5.7 MEDIUM |
| Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Low) | |||||
| CVE-2026-13384 | 1 Watchguard | 39 Firebox M270, Firebox M290, Firebox M295 and 36 more | 2026-10-25 | N/A | 7.2 HIGH |
| An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI. | |||||
| CVE-2026-9105 | 1 Tp-link | 2 Tl-wr841n, Tl-wr841n Firmware | 2026-10-25 | N/A | 6.5 MEDIUM |
| An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process. Successful exploitation results in a denial-of-service condition, causing the device to crash and automatically reboot. | |||||
| CVE-2026-13592 | 2026-10-25 | 7.5 HIGH | 7.3 HIGH | ||
| A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component EtherNet IP Message Handler. Performing a manipulation results in out-of-bounds write. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named 3a0159ed43125dcd024a1965f0289cb186bae9ff. To fix this issue, it is recommended to deploy a patch. | |||||
| CVE-2026-13873 | 4 Apple, Google, Linux and 1 more | 4 Macos, Chrome, Linux Kernel and 1 more | 2026-10-25 | N/A | 6.5 MEDIUM |
| Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-8247 | 1 Watchguard | 39 Firebox Cloud, Firebox M270, Firebox M290 and 36 more | 2026-10-25 | N/A | 8.8 HIGH |
| An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2. | |||||
| CVE-2026-40257 | 1 Trustedfirmware | 1 Op-tee | 2026-10-25 | N/A | 5.5 MEDIUM |
| OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one error that can cause a massive heap overflow that corrupts all TEE kernel memory following the hash state. This affects all platforms built with `CFG_CRYPTO_WITH_CE82=y` (ARMv8.2+ with SHA3 Crypto Extensions). Version 4.11.0 contains a patch. As a workaround, disable SHA3 Crypto Extensions with `CFG_CRYPTO_WITH_CE82=n`. | |||||
| CVE-2026-21384 | 1 Qualcomm | 158 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 155 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. | |||||
| CVE-2026-42953 | 2026-10-25 | N/A | N/A | ||
| The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution. | |||||
| CVE-2026-14739 | 1 Perl | 1 Dbi | 2026-10-25 | N/A | 9.8 CRITICAL |
| DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders. | |||||
| CVE-2026-21369 | 1 Qualcomm | 218 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 215 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification. | |||||
| CVE-2026-21368 | 1 Qualcomm | 182 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 179 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks. | |||||
| CVE-2026-21370 | 1 Qualcomm | 182 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 179 more | 2026-10-25 | N/A | 5.3 MEDIUM |
| Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values. | |||||
| CVE-2026-70197 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-15114 | 1 Google | 1 Chrome | 2026-10-25 | N/A | 8.8 HIGH |
| Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: High) | |||||
| CVE-2026-14152 | 1 Google | 1 Chrome | 2026-10-25 | N/A | 9.6 CRITICAL |
| Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-54696 | 2026-10-25 | N/A | 3.7 LOW | ||
| Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dump(obj, io) and JSON::State#generate(obj, io) can write past the internal JSON generator buffer when a streamed object contains an attacker-controlled string near 16 KB. Exploitation would result in a reliable process crash/denial of service. This issue has been fixed in version 2.19.9. | |||||
| CVE-2026-60094 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash or memory corruption by sending a malformed TCP packet with an unchecked body_len field to the agentlink_server service. Attackers can craft a malicious packet that passes an attacker-controlled length directly to recv(), triggering a heap overflow of up to approximately 4 GiB and resulting in process crash or potential memory corruption. | |||||