CWE-475
CVEs classified under CWE-475, newest first.
3 CVEsRSS
CVE-2026-73797Medium· 5.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
▾ SunlitHewlett Packard Enterprise · HPE NonStop TSQLFILEPSS 0.11%via NVD
CVE-2026-75595Critical· 9.1Netty is an asynchronous, event-driven network application framework
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so…
▾ Midnightnetty · nettyEPSS 0.32%via NVD
CVE-2026-42009High· 7.5A flaw was found in gnutls
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not cor…
▾ Twilightgnu · gnutlsEPSS 1.3%via NVD