5153 matches found
CVE-2026-33986
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuvensurebuffer in libfreerdp/codec/h264.c, h264-width and h264-height are updated before the reallocation loop. If any winpralignedrecalloc call fails, the function returns FALSE but width/height are...
CVE-2026-33985
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2...
GHSA-442J-39WM-28R2 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, py3-jupyterlab, ts-patch, prism, lerna, opensearch-dashboards, nextcloud-server...
perl: stack-based crash in S_find_uninit_var()
A stack-based buffer overflow vulnerability was found in the Sfinduninitvar function in sv.c in Perl. This issue may allow an authenticated local attacker to send a specially crafted request to the application, leading to an infinite recursion, exhausting the process' stack space, resulting in a...
CVE-2026-34714
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...
CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1
CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...
CVE-2026-23231 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23231 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...
CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10
CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10. A patched version of the package is available...
CVE-2026-23236 affecting package kernel for versions less than 6.6.130.1-1
CVE-2026-23236 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...
GHSA-2J22-PR5W-6GQ8 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails...
GHSA-W7PP-M8WF-VJ6R vulnerabilities
Vulnerabilities for packages: mitmproxy...
GHSA-P9FM-F462-GGRG vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, gitlab-rails-ce-fips...
CVE-2026-3945
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...
CVE-2026-33985
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2...