Apache OpenOffice vulnerable to out-of-bounds write in PDF import (CVE-2026-90626)
Out-of-bounds write when importing encrypted PDF files in Apache OpenOffice through 4.1.16 allows program crash or memory corruption.
Stories per day · 30 days
1 RSS
Relatedbrotli4dotnet2envoy2nodejs2zdi2apache-openoffice1apple1coregraphics1cve-2026-632731ios1ipados1istio1kev1libreoffice1libwebsockets1memory-corruption1mqtt1node-js1
36 stories, newest first · one card per story
Stories tagged #out-of-bounds-write
Apple fixes CoreGraphics flaw CVE-2026-86950 on older iPhones and iPads
Apple says the out-of-bounds write may have been used in targeted attacks on iOS before iOS 27; iOS 18.7.11 backports the fix.
CISA lists critical Google Brotli flaw CVE-2026-111497 as exploited
Out-of-bounds writes in the decoder can yield code execution; fixed builds are 1.0.10, 1.1.1, and 1.2.1.
Palo Alto says Brotli flaw can hit some PAN-OS firewalls (CVE-2026-111497)
The CVSS 9.2 decoder bug needs Brotli inspection plus decryption; no exploitation is known, and hotfixes are only estimated.
Google Brotli decoder CVE-2026-111497 can yield remote code execution
Google scored it 9.2; major runtimes have fixes, but some projects had not shipped a fixed release as of October 26.
Node.js Brotli decoder flaw can crash or run code (CVE-2026-111497)
Fixed builds are 22.23.4, 24.22.1 and 26.12.1; Rapid7 reports no known exploitation and it is not on the KEV list.
libwebsockets MQTT PUBACK handling flaw allows unauthenticated RCE
ZDI rates CVE-2026-114550 at 8.1; no login is required, and no fixed version is named.
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing out-of-bounds write that can run code if a user opens a malicious file.
CVE-2026-59685: Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
CVE-2026-59685 is a moderate Apache HTTP Server out-of-bounds write on Windows when 8.3 names expand.
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
Public crash PoC released for Apple CoreGraphics zero-day CVE-2026-86950, reportedly used in targeted attacks.
6
CVE-2026-86950: Apple CoreGraphics Zero-Day
Apple patched CVE-2026-86950, a critical CoreGraphics zero-day out-of-bounds write that can run code.
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Apple says attackers are exploiting out-of-bounds write zero-day CVE-2026-86950 in targeted attacks.
Apple Warns Users iOS Vulnerability Exploited in Attack (CVE-2026-86950)
Apple patched CVE-2026-86950, an out-of-bounds write in iOS and macOS exploited in targeted attacks.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Apple out-of-bounds write CVE-2026-86950 to the KEV catalog.
Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)
Apple fixed actively exploited Core Graphics zero-day CVE-2026-86950 that enables code execution from a malicious file.
12
Apple patches CoreGraphics zero-day flaw exploited in attacks
Apple patched CoreGraphics zero-day CVE-2026-20700 after sophisticated targeted attacks on iOS devices.
9
ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader out-of-bounds write that can enable remote code execution.
lwIP TCP/IP Stack MQTT Client Application
CISA warns lwIP MQTT client versions 2.0.1 through 2.2.1 have critical CVE-2026-87121.
[Control Systems] Moxa security advisory (AV26-938)
Canada's Cyber Centre (AV26-938) warns of out-of-bounds write flaw CVE-2026-15579 in Moxa TN-4500B Series Ethernet switches at or below v2.0.
Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory
Two VLC 3.0 flaws, CVE-2026-56711 (heap corruption, CVSS 8.6) and CVE-2026-73324 (memory leak), let crafted PNGs or RTSP playlists corrupt memory or leak data.
4
USN-8743-1: PHP vulnerabilities
Ubuntu fixes three PHP flaws, including SQL injection in the PostgreSQL extension (CVE-2026-17543) and an out-of-bounds write in bccomp().
Google Chrome Zero-day Vulnerability Exploited in the Wild (CVE-2026-87491)
Google patched actively exploited Chrome V8 out-of-bounds write CVE-2026-87491; CISA added it to KEV with a September 23 patch deadline.
4
ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-81981, an out-of-bounds write in Adobe Acrobat Reader DC annotation handling that permits remote code execution.
Memory-safety defects in the upstream (abandoned) AOSP OpenCORE AAC decoder, shipped unpatched by Samsung TizenRT
Abandoned AOSP OpenCORE AAC decoder has out-of-bounds-write and wild-pointer flaws reachable from attacker-controlled frames, unpatched in Samsung TizenRT.