<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-126</title><description>Every new CWE-126 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93524: X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read</title><link>https://agentprime.io/advisories/CVE-2026-93524/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93524/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:24:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57185: Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser</title><link>https://agentprime.io/advisories/CVE-2026-57185/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57185/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Oct 2026 16:40:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55606: odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()</title><link>https://agentprime.io/advisories/CVE-2026-55606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55606/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 13:21:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53920: odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure</title><link>https://agentprime.io/advisories/CVE-2026-53920/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53920/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 13:20:48 GMT</pubDate><category>CVE</category></item><item><title>Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size</title><link>https://agentprime.io/advisories/GHSA-4558-3h8r-v8xp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-4558-3h8r-v8xp/</guid><description>pillow &lt;13.0.0, fixed in 13.0.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 20:00:32 GMT</pubDate><category>PyPI</category><category>pillow</category></item><item><title>Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels</title><link>https://agentprime.io/advisories/GHSA-c6hw-5grf-ff96/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-c6hw-5grf-ff96/</guid><description>pillow &gt;=8.1.0, &lt;13.0.0, fixed in 13.0.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 20:42:00 GMT</pubDate><category>PyPI</category><category>pillow</category></item><item><title>CVE-2026-107928: info leak uploading over WebSockets with GnuTLS</title><link>https://agentprime.io/advisories/CVE-2026-107928/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107928/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 20:28:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85745: MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.</title><link>https://agentprime.io/advisories/CVE-2026-85745/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85745/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 16:30:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-46471: An issue was discovered in GStreamer gst-plugins-good before 1.28.2.</title><link>https://agentprime.io/advisories/CVE-2026-46471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46471/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108454: Microsoft Office PowerPoint Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-108454/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108454/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 20:57:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101310: Multiple vulnerabilities in bhyve device models</title><link>https://agentprime.io/advisories/CVE-2026-101310/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101310/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 07:18:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97828: Role: DNS Server Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-97828/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97828/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103567: Windows Broadcast DVR User Service Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-103567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103567/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88195: Microsoft Office Excel Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-88195/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88195/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69884: Windows GDI Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69884/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69884/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85910: Windows StateRepository API Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-85910/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85910/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83835/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83835/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83788: Windows rndismp6.sys Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83788/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83788/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83685/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83685/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83565: Windows Encrypting File System (EFS) Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83565/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83565/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-95904: Windows Event Logging Service Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-95904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-95904/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96851: Windows Management Instrumentation Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-96851/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96851/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96848: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-96848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96848/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88201: Microsoft Office Excel Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-88201/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88201/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88167: Microsoft Office Word Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-88167/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88167/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85935: Windows USB Driver Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-85935/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85935/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83888: Windows CD-ROM Driver Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83888/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70041: Windows CD-ROM Driver Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-70041/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70041/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85835: Servicing Stack Updates Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-85835/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85835/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83727: Windows Overlay Filter Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83727/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-83719/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-83719/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70234: Desktop Window Manager Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-70234/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70234/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69957: Windows Overlay Filter Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69957/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69957/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69954: Windows Overlay Filter Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69954/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69954/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69953: Windows Overlay Filter Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69953/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69953/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69950: Windows Overlay Filter Elevation of Privilege Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69950/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69950/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69942: Windows Overlay Filter Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-69942/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69942/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101130: canva affinity: The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform…</title><link>https://agentprime.io/advisories/CVE-2026-101130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101130/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 12:45:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101094: canva affinity: The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly…</title><link>https://agentprime.io/advisories/CVE-2026-101094/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101094/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 12:44:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96394: canva affinity: The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not…</title><link>https://agentprime.io/advisories/CVE-2026-96394/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96394/</guid><description>CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 12:38:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57546: Buffer Over-read in WLAN HAL</title><link>https://agentprime.io/advisories/CVE-2026-57546/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57546/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Oct 2026 06:30:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20541: In Modem, there is a possible out of bounds read due to a missing permission check.</title><link>https://agentprime.io/advisories/CVE-2026-20541/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20541/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 01:40:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20540: In Modem, there is a possible out of bounds read due to a missing bounds check.</title><link>https://agentprime.io/advisories/CVE-2026-20540/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20540/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 01:40:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20539: In Modem, there is a possible out of bounds read due to a missing bounds check.</title><link>https://agentprime.io/advisories/CVE-2026-20539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20539/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 01:40:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20538: In Modem, there is a possible out of bounds read due to a missing permission check.</title><link>https://agentprime.io/advisories/CVE-2026-20538/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20538/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 01:40:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-102728: Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)</title><link>https://agentprime.io/advisories/CVE-2026-102728/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102728/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 17:55:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-102758: The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.</title><link>https://agentprime.io/advisories/CVE-2026-102758/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102758/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 17:26:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-95392: Buffer Over-read in Wireshark</title><link>https://agentprime.io/advisories/CVE-2026-95392/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-95392/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 09:32:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96420: Buffer Over-read in Wireshark</title><link>https://agentprime.io/advisories/CVE-2026-96420/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96420/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 09:30:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97399: One-byte overread in strncasecmp on Power8</title><link>https://agentprime.io/advisories/CVE-2026-97399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97399/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 28 Sep 2026 15:21:02 GMT</pubDate><category>CVE</category></item></channel></rss>