Total
334 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21381 | 1 Qualcomm | 206 Ar8035, Ar8035 Firmware, Cologne and 203 more | 2026-06-17 | N/A | 7.6 HIGH |
| Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. | |||||
| CVE-2026-21378 | 1 Qualcomm | 102 Aqt1000, Aqt1000 Firmware, Cologne and 99 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | |||||
| CVE-2026-21376 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. | |||||
| CVE-2026-21375 | 1 Qualcomm | 70 Cologne, Cologne Firmware, Fastconnect 6700 and 67 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. | |||||
| CVE-2026-21374 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. | |||||
| CVE-2026-21373 | 1 Qualcomm | 108 Aqt1000, Aqt1000 Firmware, Cologne and 105 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. | |||||
| CVE-2026-21371 | 1 Qualcomm | 104 Aqt1000, Aqt1000 Firmware, Cologne and 101 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory Corruption when retrieving output buffer with insufficient size validation. | |||||
| CVE-2026-21367 | 1 Qualcomm | 300 Ar8035, Ar8035 Firmware, Cologne and 297 more | 2026-06-17 | N/A | 7.6 HIGH |
| Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. | |||||
| CVE-2026-20846 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-06-17 | N/A | 7.5 HIGH |
| Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-0930 | 1 Wolfssh | 1 Wolfssh | 2026-06-17 | N/A | 4.3 MEDIUM |
| Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output. | |||||
| CVE-2025-7745 | 2026-06-17 | N/A | 5.8 MEDIUM | ||
| Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2. | |||||
| CVE-2025-66692 | 1 Trustwallet | 1 Trust Wallet Core | 2026-06-17 | N/A | 7.5 HIGH |
| A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input. | |||||
| CVE-2025-66038 | 1 Opensc Project | 1 Opensc | 2026-06-17 | N/A | 3.9 LOW |
| OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single byte encodes the tag (high nibble) and value length (low nibble). With a 1-byte buffer {0x0A}, the encoded element claims tag=0 and length=10 but no value bytes follow. Calling sc_compacttlv_find_tag with search tag 0x00 returns a pointer equal to buf+1 and outlen=10 without verifying that the claimed value length fits within the remaining buffer. In cases where the sc_compacttlv_find_tag is provided untrusted data (such as being read from cards/files), attackers may be able to influence it to return out-of-bounds pointers leading to downstream memory corruption when subsequent code tries to dereference the pointer. This issue has been patched in version 0.27.0. | |||||
| CVE-2025-63602 | 1 Awesomeminer | 1 Awesome Miner | 2026-06-17 | N/A | 7.3 HIGH |
| A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 (1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys) that lacks a properly secured DACL, allowing unprivileged users to interact with the driver and, as a result, the kernel. This can result in local privilege escalation, information disclosure, denial of service, and other unspecified impacts. | |||||
| CVE-2025-62792 | 1 Wazuh | 1 Wazuh | 2026-06-17 | N/A | 7.5 HIGH |
| Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_expression_match() when strlen() is called on str_test, because the corresponding buffer is not being properly NULL terminated during its allocation in OS_CleanMSG(). A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. This vulnerability is fixed in 4.12.0. | |||||
| CVE-2025-62787 | 1 Wazuh | 1 Wazuh | 2026-06-17 | N/A | 7.5 HIGH |
| Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when child_attr[p]->attributes[j] is accessed, because the corresponding index (j) is incorrect. A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. While the buffer over-read is always triggered while resolving the arguments of mdebug2, specific configuration options (analysisd.debug=2) need to be in place for the respective data to be leaked. This vulnerability is fixed in 4.10.2. | |||||
| CVE-2025-62560 | 1 Microsoft | 5 365 Apps, Excel, Office and 2 more | 2026-06-17 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2025-62473 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2025-62467 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-06-17 | N/A | 7.8 HIGH |
| Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-62464 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-06-17 | N/A | 7.8 HIGH |
| Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. | |||||