Linux Btrfs DoS

The vulnerability of the doTraceBtrfsSyncFile function in the include/trace/events/btrfs.h header of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux L2TP Buffer Overflow DoS

The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nftinnerrestoretunctx function in the net/netfilter/nftinner.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

CVE-2026-87529: Numeric Truncation Error

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Linux TLS Protocol Buffer Overflow

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

RockyLinux 8 : xmlrpc-c (RLSA-2026:64772)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

Linux kernel ebtables_init Heap Buffer Overflow DoS

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2023-54396: Improper Validation of Array Index

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...

ROS-20260909-73-0168

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260909-73-0034

The vulnerability in Chromium is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-102373

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description The PyJWS. load function in jwt/api jws.py fails to catch RecursionError when processing a deeply nested token header via json.loads. Because the parser only catches ValueError, the RecursionErr...

CVE-2026-54048: Server-Side Request Forgery (SSRF)

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

Microsoft Copilot Studio Graphical Tool Privilege Escalation

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the rzv2hivctransferbuffer function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file, a driver for multimedia devices in the Linux operating system, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise...

Linux dma_buf_fd() Buffer Overflow

The vulnerability of the dmabuffd function in the drivers/dma-buf/dma-buf.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-87563: Origin Validation Error

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

RHEL 9 : glib2 (RHSA-2026:65770)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65770 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

SUSE CVE-2026-85024

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

CVE-2026-87061

A flaw was found in olm-operator-konflux-sample. The bundle-hack/updatebundle.sh script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving skopeo or jq commands, to fail silently and proceed with...