CVE-2026-33967

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption...

CVE-2026-23789

CVE-2026-23789 is a double-free vulnerability in the Exynos MFC encoder driver across Samsung Mobile and Wearable Processors (Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, W1000). The root cause is improper cleanup of dma_buf references during err...

ROS-20260914-73-0123

The vulnerability of the Bindings component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-91027

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption...

EUVD-2026-77172

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption...

CVE-2026-23792: Origin Validation Error

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...

CVE-2026-76081: Off-by-one Error

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...

ROS-20260914-73-0085

The vulnerability in Chromium is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-91173

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the...

CVE-2026-91201: Origin Validation Error

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to...

Medium: cups-filters

Issue Overview: A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit...

CVE-2026-33967

Samsung Exynos mobile processors (1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680) contain an out-of-bounds array access in the camera driver's error-handling path , leading to memory corruption . The CVSS 3.1 score is 2.8 (LOW) with a local attack vector, high complexity, and only a low avail...

CVE-2026-33967

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption...

Oracle BI Publisher Security Full Control

The vulnerability of the BI Platform Security component of the Oracle BI Publisher software for creating reports is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

ROS-20260914-73-0063

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Amazon Linux 2023 : python3-mistune (ALAS2023-2026-2148)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2148 advisory. Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens fro...

Important: python-mistune

Issue Overview: Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the sndctlasciielemidparse function. An attacker can overwrite adjacent stack memory and potentially crash the calling process or alter its execution by supplying a crafted control-element identifier string with 64 ...

EUVD-2026-76992

joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts proto as an error code. Attackers can supply proto keys in custom messages to replace the returned object's prototype, breaking downstream code relying on...