CWE-170
CWE-170 · 7 records · 3 with a public proof-of-concept
Records the NVD classes under CWE-170, highest CVSS first.
- HIGH 7.8CVE-2026-83781
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- MEDIUM 6.5CVE-2026-57185public PoC
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP …
- MEDIUM 5.5CVE-2026-96860
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
- MEDIUM 5.5CVE-2026-96850
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2
- MEDIUM 4.8CVE-2026-121943public PoC
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a p…
- LOW 3.7CVE-2026-114457
A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded i…
- LOW 3.3CVE-2026-81882public PoC
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and di…
radare2