Export limit exceeded: 11713 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (11713 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-99002 1 Linux 2 Linux, Linux Kernel 2026-10-29 7.8 High
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before trying to copy data from the underlying surface. Fixes possible out of bounds reads with cursor snooping.
CVE-2026-83747 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 5.5 Medium
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83686 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 5.5 Medium
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-83668 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 5.5 Medium
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
CVE-2026-83671 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 6.5 Medium
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-83521 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 6.5 Medium
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
CVE-2026-83655 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 7.5 High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83651 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-29 6.5 Medium
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83649 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-29 6.5 Medium
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2026-83875 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83884 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83887 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83892 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83898 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83904 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-29 5.5 Medium
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83647 1 Microsoft 27 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 24 more 2026-10-29 7.5 High
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVE-2026-83765 1 Microsoft 27 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 24 more 2026-10-29 5.5 Medium
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-111734 1 Rt-labs 1 P-net 2026-10-29 N/A
P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the PROFINET FrameID. The VLAN tag loop had no upper bound, so a truncated frame, or a frame consisting only of VLAN tags, makes the function read past the end of the receive buffer. This can cause a crash (denial of service) or disclose memory content.
CVE-2026-111735 1 Rt-labs 1 P-net 2026-10-29 N/A
P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long enough. A crafted short frame makes the offset wrap around, so the function reads outside the receive buffer. This can cause a crash (denial of service) or disclose memory content.
CVE-2026-116142 1 Imagemagick 1 Imagemagick 2026-10-29 3.3 Low
ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing adjacent heap memory.