Active Directory Federation Services Elevation of Privilege Vulnerability

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser

dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling

Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass

libXfont2 computeProps Property Buffer Heap Buffer Overflow

libXfont2 PCF Font Parsing Heap Buffer Overflow

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

xorg-server / xwayland glamor font atlas Heap Buffer Overflow

Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Packet of death for a DNSCrypt misconfigured Unbound

'dns-error-reporting: yes' leads to stack buffer overflow

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)

TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify

wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer