Threats Tagged 'cwe-126'

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enricher mishandles writev buffers by reading only the first iovec entry but using the total iov_iter.count as the copy length. When log injection is enabled, a crafted multi-segment writev call can make OBI read and overwrite memory beyond the first segment. This issue has been patched in version 0.9.0.

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

CVE-2026-8463 is a medium severity vulnerability in LEONT's Crypt::Argon2 Perl module versions from 0.017 before 0.031. It involves a heap out-of-bounds read in the argon2_verify function when processing an empty encoded input string. This occurs because the function passes encoded_len - 1 to memchr without verifying that encoded_len is non-zero, causing an underflow and resulting in memory beyond the heap being read. This can lead to process crashes or unintended information disclosure related to adjacent memory content. No official patch or remediation guidance is currently available from the vendor.