CVE Watch19 oct 2026

CVE-2026-43028

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that

CVSS

7.1

Alto

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 1 may 2026 · Última mod.: 19 oct 2026 · CWE-170

EPSS · 30d

0.1%EPSS · 30 días0.2%

2026-09-282026-10-25

Descripción técnica

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 character before feeding them to functions that expect c-strings. Fixes tag is the most recent commit that needs this change.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1144573.7 BAJ

30.6%

——9A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.11h CVE-2026-968605.5 MED

33.6%

——10Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.11d CVE-2026-968505.5 MED

37.9%

——11Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.11d CVE-2026-837817.8 ALT

29.7%

——9Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.13d CVE-2026-818823.3 BAJ

5.9%

——2radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The vulnerability is triggered by running the explicit pFB or pFBj commands on untrusted binary property-list data. The json encoder treated the converted data as a nul-terminated c string and could continue reading beyond the allocation. This can cause disclosure of uninitialized or adjacent heap contents in JSON output and possible process termination. This issue is fixed in version 6.2.0.29d CVE-2026-733244.3 MED

14.9%

——4Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory. Exposure depends on build configuration.43d