{"metadata": {"vulnerability": "CVE-2026-105959", "count": 18, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-06T08:37:18.542Z", "date_only": false, "value": "2026-10-06T08:37:18.542Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105959", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-105959", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-08T11:00:52Z", "date_only": false, "value": "2026-10-08T11:00:52.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-105959", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-08T11:00:52Z", "date_only": false, "value": "2026-10-08T11:00:52.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-105959", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-16T11:53:00.840Z", "date_only": false, "value": "2026-10-16T11:53:00.840Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105959", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T11:53:00.840Z", "date_only": false, "value": "2026-10-16T11:53:00.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-105959", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T11:58:49.243Z", "date_only": false, "value": "2026-10-16T11:58:49.243886Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117450468800504802", "record": "CVE-2026-105959", "field": "creation_timestamp", "uuid": "0a1aa18b-a567-4c88-80b2-3d2ab6ea69ec", "content": "CVE-2026-105959 Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration data.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105959https://access.redhat.com/security/cve/CVE-2026-105959https://bugzilla.redhat.com/show_bug.cgi?id=2554008https://gitlab.freedesktop.org/spice/spice/-/merge_requests/253#RedHat #RedHatEnterpriseLinux6 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8#CVE_2026_105959#bot", "url": "https://infosec.exchange/users/cve/statuses/117450468800504802"}, {"timestamp": "2026-10-16T12:16:31Z", "date_only": false, "value": "2026-10-16T12:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M5F2-676C-JFJ7", "record": "GHSA-M5F2-676C-JFJ7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T12:16:31.733Z", "date_only": false, "value": "2026-10-16T12:16:31.733", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105959", "record": "FKIE_CVE-2026-105959", "field": "published"}, {"timestamp": "2026-10-16T12:31:22Z", "date_only": false, "value": "2026-10-16T12:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M5F2-676C-JFJ7", "record": "GHSA-M5F2-676C-JFJ7", "field": "published"}, {"timestamp": "2026-10-16T12:31:22Z", "date_only": false, "value": "2026-10-16T12:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M5F2-676C-JFJ7", "record": "GHSA-M5F2-676C-JFJ7", "field": "modified"}, {"timestamp": "2026-10-16T14:04:30.322Z", "date_only": false, "value": "2026-10-16T14:04:30.322816Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105959", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T14:04:30.322Z", "date_only": false, "value": "2026-10-16T14:04:30.322816Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105959", "record": "FKIE_CVE-2026-105959", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T14:04:46.377Z", "date_only": false, "value": "2026-10-16T14:04:46.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105959", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:04:46.377Z", "date_only": false, "value": "2026-10-16T14:04:46.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105959", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:38:04.913Z", "date_only": false, "value": "2026-10-16T16:38:04.913115Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxyz6wpjnc2x", "record": "CVE-2026-105959", "field": "creation_timestamp", "uuid": "bf58c958-5e9e-473a-882e-531a6b3a4625", "content": "spice-server\u306eGLZ\u30a8\u30f3\u30b3\u30fc\u30c0\u30fc\u306b\u8106\u5f31\u6027\u3002\u60aa\u610f\u306e\u3042\u308b\u8a8d\u8a3c\u6e08\u307f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304cVM\u30e9\u30a4\u30d6\u30de\u30a4\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u4e2d\u306b\u3001malloc\u30b5\u30a4\u30ba\u3092int\u306b\u5207\u308a\u8a70\u3081\u308b\u3053\u3068\u3067\u3001\u5de8\u5927\u306a\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u2026\nCVE-2026-105959 CVSS 7.5 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxyz6wpjnc2x"}, {"timestamp": "2026-10-16T19:23:18.623Z", "date_only": false, "value": "2026-10-16T19:23:18.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105959", "record": "FKIE_CVE-2026-105959", "field": "lastModified"}, {"timestamp": "2026-10-16T22:38:22.116Z", "date_only": false, "value": "2026-10-16T22:38:22.116440Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117452983605420978", "record": "CVE-2026-105959", "field": "creation_timestamp", "uuid": "009a4941-314b-46b4-ac93-894152c06c3b", "content": "\u26a0\ufe0f A severe vulnerability was disclosed for Red Hat Enterprise Linux (CVE-2026-105959) https://vuldb.com/vuln/421268", "url": "https://infosec.exchange/users/vuldb/statuses/117452983605420978"}]}