71947 matches found
CVE-2026-106332
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an integer overflow within the Compositing component. This flaw allows a remote attacker to bypass security boundaries and obtain cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability has been addr...
CVE-2026-106332
Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-106332
Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-106332
Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-106239
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106239
An integer overflow vulnerability exists in WebGL within Google Chrome on Android versions prior to 155.0.8059.39 . A remote attacker could exploit this flaw by hosting a crafted HTML page to potentially execute arbitrary code outside the sandbox . While the CVSS score indicates a CRITICAL severi...
EUVD-2026-93812
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106239
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106239
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-80810
A flaw was found in the Linux kernel. An integer overflow vulnerability in the iouring/rsrc component, specifically within the iovecfillbvec function, can lead to incorrect memory calculations when handling very large memory pages. This error causes the kernel to access memory outside of its...
CVE-2026-80887
A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...
USN-8884-1: U-Boot vulnerabilities
Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...
USN-8884-1 u-boot vulnerabilities
Timo Preißl discovered that U-Boot incorrectly handled certain malformed ZFS file system metadata. An attacker could possibly use this issue to trigger an integer overflow and out-of-bounds memory access, resulting in arbitrary code execution or a denial of service. CVE-2025-70290 Timo Preißl...
OPENSUSE-SU-2026:22039-1 Security update for distribution
This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283762...
CVE-2026-105839
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...
DEBIAN-CVE-2026-105839
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...
AZL-106658 CVE-2026-105839 affecting package libmikmod 3.3.11.1-14
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...
CVE-2026-105837
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...
DEBIAN-CVE-2026-105837
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...
AZL-106664 CVE-2026-105837 affecting package libmikmod 3.3.11.1-14
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...