Threat database

A timing side-channel vulnerability exists in the pure-Erlang implementation of X25519 scalar multiplication in the jose library version 3.0. This flaw can leak the private key during cryptographic operations.

An out-of-bounds read vulnerability exists in the NTLM authentication handling in Microsoft software, specifically affecting version 3.0 of the Qt product. The vulnerability is identified as CWE-125. No CVSS score or detailed impact information is provided.

An out-of-bounds read vulnerability exists in the QCborValue::fromCbor() function affecting Qt Framework version 3.0. This flaw involves improper handling of CBOR data leading to reading memory outside the intended bounds.

An out-of-bounds read vulnerability exists in the ONNX ConvTranspose shape inference when processing undersized weight rank in version 3.0. This flaw could lead to memory access errors during shape inference operations.

An out-of-bounds read vulnerability exists in the ONNX implementation for RNN, GRU, and LSTM shape inference when using old operator sets that lack rank checks. This flaw could lead to memory access errors during shape inference operations.

A vulnerability in ONNX version 3.0 involves a null pointer dereference in the ScanInferenceFunction caused by a missing required attribute. This flaw can lead to application crashes or denial of service conditions when the affected function is invoked without the necessary attribute.

CVE-2026-83380 is a vulnerability identified in Microsoft products, specifically affecting version 3.0. The vulnerability is categorized under CWE-200, which relates to information exposure. No CVSS score or detailed technical impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-87294 is a published vulnerability related to Microsoft products, specifically affecting version 3.0. The vulnerability is categorized under CWE-284, which involves improper access control. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available from the vendor at this time.

CVE-2026-87292 is a published vulnerability related to Microsoft products, specifically affecting version 3.0. The vulnerability is categorized under CWE-287, which involves improper authentication. No CVSS score or detailed impact information is provided, and no known exploits or patches are currently documented.

CVE-2026-87290 is a published vulnerability related to Microsoft products, specifically affecting version 3.0. The vulnerability is categorized under CWE-200, which involves exposure of sensitive information. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation details are available at this time.

CVE-2026-83381 is a vulnerability in Oracle Java SE related to security. The provided information does not include specific technical details about the nature of the vulnerability or its impact. No CVSS score or exploit information is available.

CVE-2026-83374 is a published vulnerability affecting version 3.0 of a Microsoft product related to Oracle Java SE and GraalVM. The vulnerability is classified under CWE-200, indicating an information disclosure issue. No CVSS score or detailed technical impact is provided, and no patch or remediation information is available. There are no known exploits in the wild at this time.

CVE-2026-83376 is a published vulnerability affecting version 3.0 of a Microsoft product related to Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. The vulnerability is categorized under CWE-200, which involves information exposure. No CVSS score or detailed impact information is provided, and no patch or remediation details are available.

This vulnerability, identified as CVE-2026-119025, involves OS command injection via PowerShell on Windows in Microsoft software versions 3.0. The description references the Microsoft Support Lifecycle but does not provide specific technical details or impact information. No CVSS score or patch information is available.

CVE-2026-83387 is a published vulnerability affecting version 3.0 of a Microsoft product related to Oracle Java SE and GraalVM. The vulnerability is categorized under CWE-200, which involves information exposure. No CVSS score or detailed impact information is provided. No patch or remediation details are available from the input data.

A vulnerability in OAuthLib version 3.0 allows token grants to use an attacker-supplied client_id for authorization even after authenticating a different client. This could lead to improper authorization decisions based on manipulated client identifiers.

CVE-2026-115207 is a vulnerability in Microsoft software version 3.0 where a filename validation bypass in the reversal fallback mechanism allows creation of files outside the intended working directory. This could potentially lead to unauthorized file creation in arbitrary locations.

An uncontrolled recursion vulnerability exists in OW2 ASM version 3.0 within the ClassWriter.replaceAsmInstructions() method. This flaw could potentially cause issues related to recursion control in the affected software version.

CVE-2026-116486 is a type confusion vulnerability in Objenesis version 3.0 related to the class name instantiator cache. The vulnerability is categorized under CWE-386, which involves type confusion issues. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

CVE-2026-118131 is a published vulnerability affecting Microsoft product version 3.0. No detailed technical information, impact, or exploit data is provided. There is no CVSS score or vendor advisory content available to clarify the nature or severity of the vulnerability.