Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.7MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the orig…EPSS 0.8%Sep 3, 2026
- Low2.9FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.EPSS 0.2%Sep 1, 2026
- Medium4.7In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in…EPSS 0.1%Aug 24, 2026
- Medium6.5An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause…EPSS 0.4%Aug 24, 2026
- Low2.1A vulnerability was detected in Open5GS 2.8.0.EPSS 0.3%Aug 24, 2026
- High8.2Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_S…EPSS 0.2%Aug 21, 2026
- High7.5mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality.EPSS 0.5%Aug 21, 2026
- Medium6.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.EPSS 0.5%Aug 21, 2026
- High7.1netfilter: ebtables: terminate table name before find_table_lock()EPSS 0.1%Jul 25, 2026
- High7.1isofs: bound Rock Ridge symlink components to the SL recordEPSS 0.2%Jul 25, 2026
- High7.6The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command siz…EPSS 0.2%Jul 21, 2026
- High8.8The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by co…EPSS 0.4%Jul 15, 2026
- Medium5.5Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.EPSS 0.4%Jul 14, 2026
- Medium6.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.EPSS 0.5%Jul 14, 2026
- Critical9.1subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, def…EPSS 0.6%Jul 14, 2026
- Medium5.3Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which…EPSS 0.4%Jul 5, 2026
- High8.1The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment.Jun 30, 2026
- High7.4Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TT…EPSS 0.4%Jun 30, 2026
- High7.5A flaw was found in GLib.EPSS 0.5%Jun 30, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've matched th…EPSS 0.4%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_data_is_valid() reads each adverti…EPSS 0.1%Jun 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb->data to pr…EPSS 0.3%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a short BNEP SDU.EPSS 0.3%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size __tb_property_parse_dir() does not check th…EPSS 0.1%Jun 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts th…EPSS 0.3%Jun 25, 2026