6032 matches found
EUVD-2026-39315
In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctpunpackcookie only checked that the embedded INIT chunk length did not exceed the remaining cookie payload, but did not ensure that the INIT chunk is large...
CVE-2026-53218 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlled priv-len to nftparseregisterstore, which marks that many bytes in the register bitmap as initialized. However, when...
The vulnerability of the merge_reloc_root() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the mergerelocroot function in the Linux operating system is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: Check actuallength before accessing the data. The URB received in gsusbreceivebulkcallback contains a struct gshostframe. The length of the data after the header depends on the gshostframe...
ROS-20260623-73-0002
The vulnerability of the ASF plugin for the Gstreamer multimedia framework is related to insufficient data validation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Guest mode of the Google Chrome browser, which allows attackers to perform spoofing attacks
The vulnerability of the Guest mode in Google Chrome browser is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...
The vulnerability of the Content Credentials SDK libraries arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Chromium: CVE-2026-12457 Insufficient data validation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12446 Insufficient data validation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: btmtk: Check the length of the SKB data in the WMT event before accessing the struct. The function btmtkusbhciwmtsync casts the SKB data from the WMT event response into struct btmtkhciwmtevt 7 bytes and struct...
CVE-2026-12446
An insufficient data validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513313107...
CVE-2026-12457
An insufficient data validation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517153117...
Chromium: CVE-2026-11686 Insufficient validation of untrusted input in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-48107 Russh: Unchecked keyboard-interactive prompt count in client auth path
Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTHINFOREQUEST with an attacker-controlled prompt count, and the client would use that raw count direct...
CVE-2026-11685
An insufficient data validation flaw was found in the MediaCapture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517183713...
The vulnerability of the Payments component in Google Chrome and Microsoft Edge browsers allows a hacker to manipulate the URL address bar by using a specially created HTML page.
The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to forge the URL input by using a specially created HTML page...
The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome browsers, which allows a hacker to bypass the sandbox protection mechanism
The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to bypass the sandbox’s security mechanisms...
CVE-2026-11265
An insufficient data validation flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500262869...