89481 matches found
PT-2026-90740
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
Tint Component DoS
The Tint component vulnerability in Google Chrome and Microsoft Edge web browsers is related to type conversion errors. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...
GamepadAPI Component Sensitive Data Access
The vulnerability in the GamepadAPI component of Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the StorageAccessAPI component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
PT-2026-90738
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
CVE-2026-56855: Allocation of Resources Without Limits or Throttling
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
CVE-2026-63020: User Interface (UI) Misrepresentation of Critical Information
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
PT-2026-84759
Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description An issue in an undisclosed BIG-IP Configuration utility page allows an attacker to spoof error messages. An attacker can trick authenticated users into accessing malicious links, which reflect...
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...
Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-105540)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105540 advisory. A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty valu...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105457)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105457 advisory. In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member uzonesize of struct...
Oracle Linux 9 : ELSA-2026-61316-0: / xmlrpc-c (ELSA-2026-613160)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-613160 advisory. 1.51.0-17 - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928 Tenable has extracted the preceding description bloc...
AlmaLinux 9 : xmlrpc-c (ALSA-2026:61316)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:61316 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...
CVE-2026-84639
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84639
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
UBUNTU-CVE-2026-84639
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.36 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
CVE-2026-84639 Uninitialized memory in MIME parsing
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84639
Mozilla Thunderbird is affected by CVE-2026-84639 , where triggering an error condition in certain MIME bodies causes the use of uninitialized memory . This vulnerability could potentially lead to arbitrary code execution or information disclosure. The issue has been addressed in Thunderbird vers...
