CWE-787: Out-of-bounds Write vulnerabilities

CVE-2026-59685 is a high-severity out-of-bounds write vulnerability in Apache HTTP Server on Windows platforms. It occurs when processing paths with 8.3 filenames that may expand and grow in length, leading to memory corruption. The issue affects Apache HTTP Server versions from 2.4.0 through 2.4.68.

CVE-2026-56449 is a high-severity out-of-bounds write vulnerability in Apache HTTP Server version 2.4.68, specifically in the mod_proxy_html module when processing crafted HTTP response bodies. This flaw could allow an attacker to write outside the intended memory bounds, potentially leading to system instability or crashes. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild as of the publication date.

boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can supply an oversized, OpenSSL-recognized digest name and write beyond the end of the heap allocation.

CVE-2026-47601 is a high-severity out-of-bounds write vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It occurs in the open-source kernel module DMA-BUF import path, allowing an unprivileged local user to improperly preserve memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. Exploitation could lead to code execution, privilege escalation, denial of service, information disclosure, and data tampering.

CVE-2026-47496 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write triggered by a guest VM user sending a specially crafted RPC call to the host. Exploitation could lead to privilege escalation, data tampering, and denial of service. No specific affected versions or patch information are provided.

CVE-2026-47541 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information is provided. The vulnerability requires local access with low privileges and no user interaction. The CVSS score is 7.8, indicating a significant risk if exploited.

CVE-2026-47503 is a high-severity vulnerability in the NVIDIA Virtual GPU Manager for Linux. It involves an out-of-bounds write caused by a crafted RPC message with invalid performance state list size parameters sent by a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47498 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor plugin. It involves an out-of-bounds write triggered by a specially crafted RPC message from a guest VM user. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.

CVE-2026-47495 is a high-severity vulnerability in NVIDIA Virtual GPU Manager for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer that could be exploited by a user with limited privileges. Successful exploitation may result in code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47538 is an out-of-bounds write vulnerability in the NVIDIA GeForce GPU Display Driver firmware for Windows and Linux. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patch information are provided.

CVE-2026-47537 is an out-of-bounds write vulnerability in the NVIDIA GPU Display Driver for Linux kernel mode layer. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patches are provided in the available data.

CVE-2026-47532 is a medium severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering.

CVE-2026-47529 is an out-of-bounds write vulnerability in the NVIDIA GPU Display Driver for Linux kernel mode layer. Exploitation could allow attackers with high privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS score of 6.7, indicating medium severity. No affected versions or patch information are provided in the available data.

CVE-2026-47509 is a medium severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information is provided.

CVE-2026-47582 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows. It involves an out-of-bounds write in the kernel module, which could allow an attacker to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker may cause an integer overflow and out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, and code execution.

CVE-2026-47573 is a high-severity vulnerability in NVIDIA NVAPI for Windows involving an out-of-bounds write. Exploitation could allow attackers to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability affects NVIDIA GeForce products. No specific affected versions or patch information are provided.

CVE-2026-47561 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Linux. It involves an out-of-bounds write in kernel memory due to improper validation of the size of an ioctl input buffer in the kernel mode layer. Exploitation could allow an unprivileged user to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data.

CVE-2026-47553 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer that can be triggered by an unprivileged user. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. No specific affected versions or patch information is provided.

CVE-2026-47548 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves an out-of-bounds write in the kernel mode layer. Successful exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.