CWE-1050

CWE-1050 · 4 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-1050, highest CVSS first.

  1. HIGH 7.5CVE-2026-817362026-09-16

    If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 …

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.5CVE-2026-942872026-09-28

    A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-859772026-10-16

    A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lea…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.3CVE-2026-100350public PoC2026-10-15

    kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly calls regexp.MustCompile for the same parameter-name regular expression inside the per-query-key loop in urlValuesDecoder.DecodeObject used to decode …

    AI risk analysis on Exploit-DB.ai →