CVE-2016-9063
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS
9.8
Crítica
EPSS
5.4%
p93
KEV
—
Exploit Today
28
0-100
Publicado: 11 de jun. de 2018 · Última mod.: 8 de out. de 2026 · CWE-190
5.4%EPSS · 30 dias5.5%
2026-10-152026-11-11
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
- www.securityfocus.comhttp://www.securityfocus.com/bid/94337
- www.securitytracker.comhttp://www.securitytracker.com/id/1037298
- www.securitytracker.comhttp://www.securitytracker.com/id/1039427
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=1274777
- www.debian.orghttps://www.debian.org/security/2017/dsa-3898
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2016-89/
- www.securityfocus.comhttp://www.securityfocus.com/bid/94337
- www.securitytracker.comhttp://www.securitytracker.com/id/1037298
- www.securitytracker.comhttp://www.securitytracker.com/id/1039427
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=1274777
- www.debian.orghttps://www.debian.org/security/2017/dsa-3898
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2016-89/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1201398.8 ALT—
———Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.9hCVE-2026-1163288.8 ALT—
———Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.9hCVE-2026-1269168.8 ALT—
——0Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1268768.8 ALT—
——0Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1261497.5 ALT—
——0A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to crash the daemon.1dCVE-2026-1247465.5 MÉD—
——0A flaw was found in BusyBox. An integer overflow occurs in the volume_id component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by utilities such as blkid, findfs, or mount, the application crashes, resulting in a Denial of Service (DoS) that prevents the system from resolving or mounting storage devices.1d