CVE-2026-11642 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11635 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12012

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: High...

GHSA-F684-CPCQ-J565 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-VGXX-5XJ5-Q97X vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-H2CC-WX97-XP8V vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-28386 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-HMRH-MQV8-RVVR vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-5M8F-M8JV-3RP3 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42765 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42766 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-RPJ2-P5PJ-R33V vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service DoS for legitimate users...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, ruby4.0-rails, kube-logging-operator, ruby3.3-rails, kube-fluentd-operator, jruby...

CVE-2026-46705 vulnerabilities

Vulnerabilities for packages: yazi...

ROS-20260611-73-0030

The vulnerability in freerdp3 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260611-73-0025

The vulnerability in freerdp is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260611-73-0038

The vulnerability in freerdp3 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-46520

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23...

org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests

A flaw was found in org.eclipse.jetty. A remote attacker can exploit this vulnerability by sending a compressed HTTP request with Content-Encoding: gzip when the server's response is not compressed. This prevents the release of the JDK Inflater, leading to a resource leak. This resource exhaustio...