rootpwn

low · CVSS v3 3.1

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numb…

Description

A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral Encapsulation Format (TNEF) file with an excessive number of colliding attachment filenames, causing the numeric counter to write past the allocated memory buffer. This issue may result in an application crash, leading to a Denial of Service (DoS), or potentially arbitrary code execution.

Scores

Severity
low
CVSS v2
2.6
CVSS v3
3.1
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-105083

ImageMagick versions prior to 7.1.2-32 and 6.9.13-57 can silently ignore security policy rules when policy.xml uses an alternate DOCTYPE that does not end with "]>", allowing restricted operations to be performed. This policy bypass can enable attackers to execute actions normally blocked by ImageMagick’s security policies. The vulnerability is low severity but still poses a risk to systems that rely on strict policy enforcement.

View analysis

low

CVE-2026-104415

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not directly reveal hashes or enable practical password recovery.

View analysis

low

CVE-2026-103489

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to HTML injection in VCS command failure notifications, allowing attackers to inject malicious HTML into notification pages. This flaw can lead to cross‑site scripting (XSS) attacks that compromise user sessions or deface content. The issue is limited to the notification mechanism and does not affect core application logic.

View analysis

low

CVE-2026-21833

HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header may reduce the effectiveness of browser-based security controls, potentially resulting in unintended behavior or negative security impacts under certain conditions.

View analysis