A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages.
Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.
This attack can lead the GPU to perform write operations on restricted internal GPU buffers that can lead to a second order affect of corrupted arbitrary physical memory.
CVE-2026-7057 is a high-severity buffer overflow vulnerability in Tenda F456 version 1.0.0.5. It exists in an unknown function within the /goform/setcfm endpoint of the httpd component. The vulnerability is triggered by manipulating the funcname or funcpara1 arguments remotely, potentially allowing an attacker to cause a buffer overflow. No official patch or remediation guidance is currently available, and no known exploits in the wild have been reported.
CVE-2026-7056 is a high-severity buffer overflow vulnerability in the Tenda F456 router version 1.0.0.5. It affects the fromSafeUrlFilter function in the /goform/SafeUrlFilter component of the httpd service. The vulnerability arises from improper handling of the 'page' argument, allowing remote attackers to cause a buffer overflow. Exploit code is publicly available, but no known exploits in the wild have been reported. No official patch or remediation guidance has been provided by the vendor as of now.
CVE-2026-7055 is a high-severity buffer overflow vulnerability in Tenda F456 version 1.0.0.5. It affects the fromVirtualSer function in the /goform/VirtualSer component of the httpd service. The vulnerability arises from improper handling of the menufacturer/Go argument, allowing remote attackers to cause a buffer overflow. This issue has been publicly disclosed, but no known exploits are currently observed in the wild. No official patch or remediation guidance has been provided by the vendor as of the publication date.
CVE-2026-7054 is a high-severity buffer overflow vulnerability in Tenda F456 version 1.0.0.5. It affects the fromPptpUserAdd function in the /goform/PPTPDClient component of the device's HTTP server. The vulnerability arises from improper handling of the opttype/username argument, allowing remote attackers to cause a buffer overflow. Exploit code has been publicly released, increasing the risk of attacks. No official patch or remediation guidance has been provided by the vendor as of the publication date.
CVE-2026-7053 is a high-severity buffer overflow vulnerability in the Tenda F456 router firmware version 1.0.0.5. The flaw exists in the function frmL7ProtForm within the /goform/L7Prot component of the httpd service. It can be triggered remotely by manipulating the 'page' argument, potentially allowing an attacker to cause a buffer overflow. Although an exploit has been publicly released, there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-7035 is a high-severity stack-based buffer overflow vulnerability in Tenda FH1202 version 1.2.0.14. It affects the httpd component, specifically the fromWrlclientSet function in the /goform/WrlclientSet file. An attacker can remotely exploit this by manipulating the Go argument, potentially causing a buffer overflow. The vulnerability has been publicly disclosed, but no official patch or remediation has been indicated yet.
CVE-2026-7034 is a high-severity stack-based buffer overflow vulnerability in the Tenda FH1202 router firmware version 1.2.0.14(408). The flaw exists in the WrlExtraSet function of the httpd component, where manipulation of the Go argument can trigger the overflow. This vulnerability can be exploited remotely without user interaction or privileges. Although an exploit has been publicly disclosed, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.
A vulnerability has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Such manipulation of the argument menufacturer/Go leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-7031 is a high-severity buffer overflow vulnerability in Tenda F456 version 1.0.0.5. It arises from improper handling of the 'page' argument in the fromSafeMacFilter function within the /goform/SafeMacFilter file. This flaw can be exploited remotely without user interaction or privileges. Although a public exploit exists, there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance has been provided by the vendor at this time.
A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-7029 is a high-severity buffer overflow vulnerability in the Tenda F456 router version 1.0.0.5. It exists in the fromaddressNat function of the /goform/addressNat file, where manipulation of the menufacturer/Go argument can trigger the overflow. The vulnerability is remotely exploitable without user interaction or privileges. Although an exploit is publicly available, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided yet.
A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Multiple security vulnerabilities have been identified in webkit2gtk3, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9. These vulnerabilities include crashes, denial-of-service, information disclosure, same-origin policy bypass, content security policy bypass, user fingerprinting, cross-site scripting, and sandbox escape issues triggered by processing maliciously crafted web content or websites. The Red Hat advisory rates the overall impact as Important and provides updates to address these issues.
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the Array class's grow() method computes a negative size value, causing a SIGSEGV crash. An unauthenticated attacker who knows only the server's IP and port can exploit this to crash the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.
CVE-2026-34864 is a medium severity vulnerability in Huawei HarmonyOS version 6.0.0 involving improper restriction of operations within memory buffer bounds in the application read module. Exploitation of this boundary-unlimited vulnerability may impact system availability. There is no current information on an official patch or remediation. No known exploits are reported in the wild at this time.