CVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from
CVSS
8.8
High
EPSS
9.3%
p95
KEV
—
Exploit Today
29
0-100
Published: Mar 21, 2019 · Last modified: Oct 14, 2026 · CWE-190 · CWE-787
9.3%EPSS · 30 days9.3%
2026-10-142026-11-11
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
- seclists.orghttp://seclists.org/fulldisclosure/2019/Sep/42
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/03/18/3
- www.securityfocus.comhttp://www.securityfocus.com/bid/107485
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:0679
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:1175
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:1652
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:1791
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:1943
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2019:2399
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/03/msg00032.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/
- seclists.orghttps://seclists.org/bugtraq/2019/Apr/25
- seclists.orghttps://seclists.org/bugtraq/2019/Mar/25
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-126916——
———Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4hCVE-2026-126893——
———Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4hCVE-2026-126876——
———Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4hCVE-2026-126840——
———Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4hCVE-2026-1262458.1 HIG—
———A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to execute unauthorized code or commands via http requests, should the attacker be able to defeat ASLR protections.5hCVE-2026-1262287.2 HIG—
———A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.4 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.4 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.4 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.4 through 7.2.12 may allow an authenticated remote attacker with admin privileges to execute unauthorized code or commands via a specially crafted request.5h