CVE Vulnerability Catalog

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

An out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

Incorrect buffer size calculation vulnerability in Windows VMSwitch. Allows an authorized attacker to cause a local denial of service.

A vulnerability in Windows Kerberos allows an authorized attacker to cause a denial of service over the network via an out-of-bounds read.

A vulnerability in Windows Shell allows an authorized attacker to disclose sensitive information over a network. The flaw stems from unauthorized access to data.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.

A null pointer dereference vulnerability in Windows Kerberos allows an authorized attacker to perform a Denial of Service (DoS) attack over a network.

OpenSSL has an out-of-bounds read vulnerability in X509_VERIFY_PARAM_set1_email when validating a crafted email address, e.g., in S/MIME verification. An internal helper function fails to enforce the 64-octet limit on the local part, leading to out-of-bounds read and potential crash.

A typo in the certificate chain building code for processing 'id-it-rootCaKeyUpdate' CMP messages caused an incorrect certificate to be added to the chain, rendering certificate verification ineffective. This could allow an attacker with RA-level credentials to escalate privileges to root CA level.

OpenSSL has a NULL pointer dereference vulnerability in the CMP client. An attacker controlling a CMP server (or acting as man-in-the-middle) can craft a CMP response containing a CRMF CertRepMessage with an EncryptedValue where the symmAlg field has an algorithm OID but no parameters. Processing this response causes a NULL dereference and crash (DoS). FIPS modules are not affected.

OpenSSL before a fixed version has a NULL pointer dereference vulnerability during password-based CMS decryption. A specially crafted CMS message can cause an application crash and Denial of Service.

Svelte prior to version 5.55.7 contains a vulnerability where, when using spread syntax to render attributes from untrusted data, event handlers are included in the rendered HTML output. If an application spreads user-controlled data as element attributes, an attacker can inject malicious event handlers that execute in victims' browsers. The vulnerability only triggers if the user's browser has JavaScript enabled and Svelte's hydration mechanism does not reach the vulnerable element before the event fires.

Svelte prior to version 5.55.7 is vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks.

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

OpenSSL is vulnerable to a double-free in the client certificate verification path when OCSP stapling is used. A malicious server can trigger heap memory corruption via a crafted OCSP response.

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a crafted webpage.

Microsoft Office SharePoint contains a cross-site scripting (XSS) vulnerability due to improper input neutralization during page generation. An unauthorized attacker can exploit this to perform spoofing over a network.

A vulnerability allows an attacker to provide a crafted external URL that may redirect a user to an unintended website.

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app could allow an attacker to perform man-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

Insufficient configuration management in the listed devices allows authenticated administrators on the local network to tamper with the system.