CVE-2026-123605 is a vulnerability in Hickory DNS version 3.0 that allows DNSSEC validation bypass via manipulation of the RRSIG signer's name. This flaw could undermine the integrity of DNSSEC validation, potentially allowing attackers to bypass DNS security checks.
CVE-2026-123596 is a vulnerability in Hickory DNS version 3.0 involving DNSSEC validation bypass via ancestor-delegation NSEC records. This flaw could allow an attacker to bypass DNSSEC validation checks, potentially undermining DNS security. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-123581 is a vulnerability in Hickory DNS version 3.0 that allows DNSSEC validation to be bypassed via an unrelated resource record set (RRset). This flaw could undermine the integrity checks DNSSEC is designed to provide.
CVE-2026-123608 is a vulnerability in Hickory DNS hickory-proto version 3.0 involving CPU exhaustion caused by BinEncoder name compression. The issue relates to inefficient processing that can lead to resource exhaustion. No CVSS score or detailed impact information is provided.
CVE-2026-123576 is a vulnerability in Hickory DNS versions 0.24.0 through 0.26.1 that allows memory exhaustion via DNS-over-QUIC requests. The issue relates to resource management under specific network request conditions.
CVE-2026-123593 is a vulnerability in Hickory DNS versions before 0.26.2 that allows bypassing DNSSEC validation via TrustAnchors. The affected product is Microsoft-related software, specifically version 3.0. No CVSS score or detailed impact information is provided.
CVE-2026-123577 is a denial of service vulnerability in Hickory DNS versions 0.24.0 up to but not including 0.26.2 related to unbounded request bodies in DNS over HTTPS (DoH) handling. This flaw could allow an attacker to cause resource exhaustion by sending excessively large request bodies. The vulnerability affects Hickory DNS version 3.0 as stated, though no detailed patch or remediation information is provided.
CVE-2026-123599 is a vulnerability in Hickory DNS versions before 0.26.0-beta.1 that allows DNSSEC validation to be bypassed via non-IN class records. This flaw affects Microsoft product version 3.0. No CVSS score or detailed impact information is provided.
CVE-2026-123594 is a vulnerability in Hickory DNS version 3.0 involving DNSSEC NSEC validation bypass for empty non-terminals. The issue relates to improper validation that could affect DNS security. No CVSS score or detailed impact information is provided.
CVE-2026-123570 is a vulnerability in Hickory DNS versions from 0.18 up to but not including 0.26.2 that allows memory amplification leading to a denial of service (DoS) via resource record (RR) counts. The affected product is Microsoft software version 3.0. No CVSS score or detailed impact metrics are provided.
CVE-2026-123876 is a vulnerability in Podman containers-common version 3.0 involving default seccomp rules that deny af_vsock and netlink_audit. These deny rules can be bypassed on 32-bit systems, potentially allowing unintended access or actions.
CVE-2026-123613 is a vulnerability in Rustls versions before 0.23.45, specifically version 0.23.13, that allows bypassing the TLS 1.3 handshake encryption level. The vulnerability is identified by Microsoft Security Response Center and is categorized under CWE-20 (Improper Input Validation). No CVSS score or detailed impact information is provided. No patch links or remediation details are available in the provided data.
CVE-2026-123611 is a vulnerability in rustls before version 0.23.46 that allows a key exchange downgrade via an unauthenticated ServerHello message. The vulnerability is identified by CWE-757 and affects version 3.0 of the Microsoft product referencing rustls. No CVSS score or detailed impact information is provided.
CVE-2026-123609 is a vulnerability in Rustls versions before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 that involves secret exposure via debug functionality. The vulnerability is identified as CWE-212, which relates to exposure of sensitive information. The affected product is Microsoft-related software with version 3.0 noted. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.
A denial of service vulnerability exists in rustls before version 0.23.46 due to Brotli certificate decompression. This flaw could allow an attacker to cause resource exhaustion by exploiting the decompression process of certificates.
CVE-2026-54914 is a heap buffer overflow vulnerability in the WebAssembly Micro Runtime (WAMR) specifically in the WASI poll_oneoff output buffer. This flaw affects version 3.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.
A vulnerability in the dbus-daemon component of Microsoft software causes the daemon to abort when a broadcast from the driver cannot be delivered and the reply_serial is not zero. This issue is identified as CVE-2026-120749 and relates to improper handling of message delivery failures.
CVE-2026-77299 is a vulnerability in Microsoft software involving the Regexp2 engine, where an unbounded memory amplification can occur due to a large {m} quantifier applied on a zero-width subexpression. This can lead to excessive memory consumption during regular expression processing.
A stack buffer overflow vulnerability exists in GDB version 3.0 in the function parse_tracepoint_definition due to a stale rs->buf tail. This vulnerability is identified as CWE-121. No CVSS score or detailed impact information is provided.
A stack buffer overflow vulnerability exists in Gdb version 3.0 in the parse_tsv_definition function due to a stale buffer tail. This vulnerability is identified as CWE-121. No CVSS score or detailed impact information is provided.