Monthly
Wireshark's Tektronix K12xx file parser crashes when processing a malformed capture file, causing a denial of service in versions 4.6.0-4.6.7 and 4.4.0-4.4.18. Rooted in CWE-126 (Buffer Over-read), the flaw allows an attacker to terminate Wireshark on a victim's system by inducing them to open a specially crafted K12xx-format file. No public exploit code and no active exploitation (CISA KEV) have been identified; the low CVSS score of 3.1 reflects the crash-only impact and mandatory user interaction.
The ERF file parser in Wireshark crashes on malformed input, enabling denial of service against analyst workstations running versions 4.4.0 through 4.4.17 and 4.6.0 through 4.6.7. Exploitation requires that a user open a specially crafted ERF capture file, and the CVSS vector (AV:N/AC:H/UI:R/A:L) reflects both the user-interaction dependency and the limited scope of impact - a crash of the Wireshark process only. No public exploit has been identified at time of analysis, and CISA KEV does not list this CVE.
Information disclosure in Silicon Labs RS9116W and SiWx917 wireless modules running WiseConnect exposes potentially sensitive data to adjacent Bluetooth attackers. A specially crafted malformed Bluetooth connection request triggers a buffer over-read (CWE-126), causing the device to leak memory contents to the attacker without any authentication requirement. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog.
Memory disclosure in the Silicon Labs BT122 Bluetooth module allows unauthenticated adjacent attackers to leak potentially sensitive device memory by sending a malformed Bluetooth connection request. The root cause is a buffer over-read (CWE-126) in the firmware's connection request parser, identified as finding B-E4 in academic research published on arXiv (2409.02905). No public exploit code and no CISA KEV listing have been identified at time of analysis; risk is constrained by Bluetooth radio range and the niche embedded deployment footprint of the BT122.
Buffer over-read in PostgreSQL's ascii() SQL function exposes up to 3 bytes of heap memory beyond a specific allocation boundary when processing a crafted text value. Authenticated database users on affected versions - PostgreSQL 14.x before 14.24, 15.x before 15.19, 16.x before 16.15, 17.x before 17.11, and 18.x before 18.5 - can trigger this condition via a malicious SQL query. The vulnerability is a partial information disclosure with limited impact; no public exploit code has been identified at time of analysis.
Buffer over-read in PostgreSQL's pg_trgm extension exposes limited heap memory values to authenticated low-privileged users through the side-channel of GiST index picksplit decisions. All four active major release branches are affected - versions before 18.5, 17.11, 16.15, 15.19, and 14.24. No public exploit has been identified and active exploitation has not been confirmed; the practical impact is constrained by the indirect, lossy nature of the information disclosure mechanism.
Remote unauthenticated denial of service in Windows Network File System (NFS) allows a network attacker to crash the NFS service by sending a malformed packet that triggers a buffer over-read (CWE-126). Affected systems span Windows Server 2012 through 2025 and Windows 10 versions 1607 and 1809. No public exploit code has been identified at time of analysis, and CISA has not added this to the Known Exploited Vulnerabilities catalog; Microsoft has released patches across all affected build lines.
Information disclosure via a buffer over-read in the Windows SMB Client component affects a broad spectrum of Microsoft Windows desktop and server editions, from Windows Server 2012 through Windows 11 25H2. An attacker who controls a malicious SMB server and induces a target Windows user to connect to it can trigger the client to read beyond allocated memory buffer boundaries, leaking potentially sensitive process memory contents across the network. SSVC rates exploitation status as none and no public exploit code has been identified at time of analysis, though the high confidentiality impact (C:H) and the near-universal deployment footprint of the Windows SMB Client make this a meaningful routine patch priority.
Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a local exploitation scenario requiring user interaction - consistent with a malicious document delivery attack - yielding full confidentiality, integrity, and availability impact on the affected system. No special privileges are required from the attacker. No public exploit code or CISA KEV listing was identified in the provided intelligence at time of analysis.
Information disclosure in the Windows NTFS filesystem driver allows a local low-privileged attacker to read beyond buffer boundaries and expose sensitive memory contents. Affecting virtually every supported Windows desktop and server release - from Windows 10 1607 through Windows Server 2025 and Windows 11 26H1 - the vulnerability requires only a standard local user account and no special configuration, making it a realistic threat in multi-tenant, shared, or cloud environments where local access is granted to semi-trusted users. No public exploit code or active exploitation has been identified at time of analysis; Microsoft has released patches across all affected product lines.
Wireshark's Tektronix K12xx file parser crashes when processing a malformed capture file, causing a denial of service in versions 4.6.0-4.6.7 and 4.4.0-4.4.18. Rooted in CWE-126 (Buffer Over-read), the flaw allows an attacker to terminate Wireshark on a victim's system by inducing them to open a specially crafted K12xx-format file. No public exploit code and no active exploitation (CISA KEV) have been identified; the low CVSS score of 3.1 reflects the crash-only impact and mandatory user interaction.
The ERF file parser in Wireshark crashes on malformed input, enabling denial of service against analyst workstations running versions 4.4.0 through 4.4.17 and 4.6.0 through 4.6.7. Exploitation requires that a user open a specially crafted ERF capture file, and the CVSS vector (AV:N/AC:H/UI:R/A:L) reflects both the user-interaction dependency and the limited scope of impact - a crash of the Wireshark process only. No public exploit has been identified at time of analysis, and CISA KEV does not list this CVE.
Information disclosure in Silicon Labs RS9116W and SiWx917 wireless modules running WiseConnect exposes potentially sensitive data to adjacent Bluetooth attackers. A specially crafted malformed Bluetooth connection request triggers a buffer over-read (CWE-126), causing the device to leak memory contents to the attacker without any authentication requirement. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog.
Memory disclosure in the Silicon Labs BT122 Bluetooth module allows unauthenticated adjacent attackers to leak potentially sensitive device memory by sending a malformed Bluetooth connection request. The root cause is a buffer over-read (CWE-126) in the firmware's connection request parser, identified as finding B-E4 in academic research published on arXiv (2409.02905). No public exploit code and no CISA KEV listing have been identified at time of analysis; risk is constrained by Bluetooth radio range and the niche embedded deployment footprint of the BT122.
Buffer over-read in PostgreSQL's ascii() SQL function exposes up to 3 bytes of heap memory beyond a specific allocation boundary when processing a crafted text value. Authenticated database users on affected versions - PostgreSQL 14.x before 14.24, 15.x before 15.19, 16.x before 16.15, 17.x before 17.11, and 18.x before 18.5 - can trigger this condition via a malicious SQL query. The vulnerability is a partial information disclosure with limited impact; no public exploit code has been identified at time of analysis.
Buffer over-read in PostgreSQL's pg_trgm extension exposes limited heap memory values to authenticated low-privileged users through the side-channel of GiST index picksplit decisions. All four active major release branches are affected - versions before 18.5, 17.11, 16.15, 15.19, and 14.24. No public exploit has been identified and active exploitation has not been confirmed; the practical impact is constrained by the indirect, lossy nature of the information disclosure mechanism.
Remote unauthenticated denial of service in Windows Network File System (NFS) allows a network attacker to crash the NFS service by sending a malformed packet that triggers a buffer over-read (CWE-126). Affected systems span Windows Server 2012 through 2025 and Windows 10 versions 1607 and 1809. No public exploit code has been identified at time of analysis, and CISA has not added this to the Known Exploited Vulnerabilities catalog; Microsoft has released patches across all affected build lines.
Information disclosure via a buffer over-read in the Windows SMB Client component affects a broad spectrum of Microsoft Windows desktop and server editions, from Windows Server 2012 through Windows 11 25H2. An attacker who controls a malicious SMB server and induces a target Windows user to connect to it can trigger the client to read beyond allocated memory buffer boundaries, leaking potentially sensitive process memory contents across the network. SSVC rates exploitation status as none and no public exploit code has been identified at time of analysis, though the high confidentiality impact (C:H) and the near-universal deployment footprint of the Windows SMB Client make this a meaningful routine patch priority.
Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a local exploitation scenario requiring user interaction - consistent with a malicious document delivery attack - yielding full confidentiality, integrity, and availability impact on the affected system. No special privileges are required from the attacker. No public exploit code or CISA KEV listing was identified in the provided intelligence at time of analysis.
Information disclosure in the Windows NTFS filesystem driver allows a local low-privileged attacker to read beyond buffer boundaries and expose sensitive memory contents. Affecting virtually every supported Windows desktop and server release - from Windows 10 1607 through Windows Server 2025 and Windows 11 26H1 - the vulnerability requires only a standard local user account and no special configuration, making it a realistic threat in multi-tenant, shared, or cloud environments where local access is granted to semi-trusted users. No public exploit code or active exploitation has been identified at time of analysis; Microsoft has released patches across all affected product lines.