| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections, including TLS private keys and other users' requests. TLSWrap::DoWrite() calls ClearOut() directly when asked to write zero bytes; if that write is issued from JavaScript running inside the HTTP parser's on_body callback, ClearOut() decrypts the next TLS record while the parser is still mid-body, re-entering llhttp_execute() and causing a use-after-free and an out-of-bounds heap read. The server then copies that freed or unrelated heap memory into the response for the request body. Triggering it requires a handler that calls res.flushHeaders() before the request body ends and later calls res.end() with a non-empty chunk, and reading the leaked memory requires any ordinary route that echoes or stores a request body. Cleartext node:http is not affected. This vulnerability affects Node.js 26.x, 24.x, and 22.x. |
| iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chunked-transfer-encoding HTTP request parser in @iopress/core reads past the end of the input buffer when a request declares a chunk size larger than the body actually received. This results in a heap-buffer-over-read. This issue has been patched in version 1.0.5. |
| Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially resulting in loss of integrity. |
| Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally. |
| Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network. |
| Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
| Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
| Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
| Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
| Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
| Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. |
| Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
