DEBIAN-CVE-2026-113199

Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113151

Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113054

Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

DEBIAN-CVE-2026-113102

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113329

Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113310

Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-113035

Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113045

Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113010

Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113300

Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-113309

Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-113050

Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113233

Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

vulnerabilities in Oracle MySQL

Oracle has identified vulnerabilities in various products, including Oracle MySQL Server, MySQL Cluster, MySQL Enterprise Backup, MySQL Connectors including Connector/ODBC, and MySQL Router. These vulnerabilities affect various components of Oracle products, such as MySQL Server, MySQL Cluster,...

CVE-2026-111678

A flaw was found in antiword. An out-of-bounds read vulnerability exists in the document parser due to missing bounds checks when processing internal formatting data. By tricking a user into opening a specially crafted Microsoft Word document, an attacker could cause the application to crash,...

CVE-2026-111879

A flaw was found in perl-DBI. When creating or opening a database table in the DBD::DBM module fails due to an error, an exclusive file lock acquired during initialization is not properly released. A user or attacker who can control connection parameters can trigger this failure, leaving the lock...

CVE-2026-112020

A flaw was found in lodepng. A missing bounds check in the getFilterTypesInterlaced function allows an out-of-bounds memory read when handling decompressed image data. An attacker could exploit this flaw by supplying a specially crafted interlaced PNG image for processing, resulting in a Denial o...

CVE-2026-111677

A flaw was found in Antiword. An attacker could exploit this vulnerability by enticing a user to open a specially crafted Word document. Due to an incorrect bounds check when parsing list records, processing the file triggers an out-of-bounds read from memory, causing the application to crash and...