Total
3251 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-48502 | 1 Messagepack | 1 Messagepack | 2026-06-23 | N/A | 7.5 HIGH |
| MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.ReadDateTime() can allocate stack memory based on an attacker-controlled MessagePack extension length. In the slow path for timestamp extension parsing, the computed tokenSize includes the extension body length from the wire and is used in a stackalloc operation before the extension length is validated as one of the valid timestamp sizes. A very small payload can claim a large timestamp extension body and cause a stack allocation large enough to trigger an uncatchable StackOverflowException, terminating the host process. This vulnerability is fixed in 2.5.301 and 3.1.7. | |||||
| CVE-2026-56406 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.9 MEDIUM |
| libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse. | |||||
| CVE-2026-56407 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.9 MEDIUM |
| libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. | |||||
| CVE-2026-56408 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.9 MEDIUM |
| libexpat before 2.8.2 has an integer overflow in copyString. | |||||
| CVE-2026-56409 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.5 MEDIUM |
| xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. | |||||
| CVE-2026-56410 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.9 MEDIUM |
| xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. | |||||
| CVE-2026-56411 | 1 Libexpat Project | 1 Libexpat | 2026-06-23 | N/A | 6.9 MEDIUM |
| xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. | |||||
| CVE-2026-8805 | 2026-06-22 | N/A | N/A | ||
| Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1.000 and prior allows a remote attacker to cause a denial-of-service (DoS) condition in the affected product by rapidly establishing a large number of TCP connections to it, resulting in an inconsistency in the product's internal connection management process and triggering improper memory access. | |||||
| CVE-2026-3196 | 2026-06-22 | N/A | 5.5 MEDIUM | ||
| An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition. | |||||
| CVE-2026-0161 | 1 Google | 1 Android | 2026-06-17 | N/A | 8.8 HIGH |
| In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-0148 | 1 Google | 1 Android | 2026-06-17 | N/A | 8.8 HIGH |
| In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-0150 | 1 Google | 1 Android | 2026-06-17 | N/A | 7.8 HIGH |
| In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with root privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-0151 | 1 Google | 1 Android | 2026-06-17 | N/A | 8.8 HIGH |
| In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-54417 | 2026-06-17 | N/A | 7.5 HIGH | ||
| An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next() computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arithmetic. When the header size field is a multiple of 512 in the range 0xFFFFFC01-0xFFFFFE00 (e.g. 0xFFFFFE00), the addition wraps to 0, so mtar_next() seeks to the current record position instead of advancing. As a result, mtar_find() and any loop that iterates entries with mtar_next() repeat indefinitely over the same record, hanging the process at 100% CPU with no recovery. | |||||
| CVE-2026-0140 | 1 Google | 1 Android | 2026-06-17 | N/A | 4.3 MEDIUM |
| In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. | |||||
| CVE-2026-0131 | 1 Google | 1 Android | 2026-06-17 | N/A | 7.3 HIGH |
| In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. | |||||
| CVE-2026-8956 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-06-17 | N/A | 9.8 CRITICAL |
| Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8949 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-06-17 | N/A | 7.5 HIGH |
| Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | |||||
| CVE-2026-8295 | 2026-06-17 | N/A | N/A | ||
| An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_and_append()" when processing very large input strings on platforms with limited "size_t" width (e.g., 32-bit builds). The overflow can cause insufficient buffer allocation, leading to out-of-bounds memory reads in SIMD routines and potentially resulting in information disclosure, memory corruption, or malformed JSON output. This vulnerability has been fixed in 4.6.4 release | |||||
| CVE-2026-6783 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-06-17 | N/A | 5.3 MEDIUM |
| Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | |||||