Tag

Memory-Disclosure

3 briefs RSS

CVE-2026-45736: Uninitialized Memory Disclosure Vulnerability in Microsoft Products

CVE-2026-45736 is an uninitialized memory disclosure vulnerability affecting Microsoft products, potentially allowing an attacker to read sensitive information from process memory.

memory-disclosure cve microsoft

2r 1c May 21, 2026

high advisory

cgltf Integer Overflow Vulnerability in Sparse Accessor Validation

2 rules 2 TTPs

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors, allowing attackers to trigger out-of-bounds reads via crafted glTF/GLB files, leading to denial of service and potential memory disclosure.

integer-overflow denial-of-service memory-disclosure glTF cgltf

2r 2t Mar 23, 2026

high advisory

CitrixBleed 2 Memory Disclosure via CVE-2025-5777

2 rules 1 TTP 2 IOCs

Exploitation of CVE-2025-5777 (CitrixBleed 2) in Citrix NetScaler ADC and Gateway leads to memory disclosure by sending crafted POST requests to the /p/u/doAuthentication.do endpoint, potentially leaking session tokens and authentication materials.

Citrix NetScaler / ADC +10 citrixbleed2 memory-disclosure web-application

2r 1t 2i updated 1w ago