Photon OS 5.0: Libarchive PHSA-2025-5.0-91-0672

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0672. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for Heap-based Buffer Overflow in Libarchive

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-devi...

CVE-2026-5915 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-5915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write v...

CVE-2026-5915

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5915

Google Chrome versions prior to 147.0.7727.55 are vulnerable to an out-of-bounds memory write due to insufficient validation of untrusted input in the WebML component. A remote attacker can exploit this by providing a crafted HTML page , potentially leading to service interruptions or arbitrary c...

CVE-2026-5915

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5915

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 17:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3eq5s3te2j 2026-04-12 20:00:00+00:00| seen|...

SUSE-SU-2025:02718-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

openSUSE Security Advisory (SUSE-SU-2025:02566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2025-0200 Updated libarchive packages fix security vulnerabilities

Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c. CVE-2025-5914 Heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c. CVE-2025-5915 Integer overflow while reading warc files at archivereadsupportformatwarc.c. CVE-2025-5916 Off by one error in...

Ubuntu: Security Advisory (USN-7601-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5915

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17767 2025-06-09 23:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7j4arom62u 2025-07-30 12:00:54+00:00| seen|...

CVE-2025-5915

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...

CVE-2020-5915

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust...

Palo Alto GlobalProtect Agent Privilege Escalation (CVE-2024-5915)

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows devicesenables a local user to execute programs with elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrary code on susceptible instances. The flaw, tracked as CVE-2024-28986 CVSS score: 9.8, has been described as a deserialization bug. "SolarWinds Web...

CVE-2023-5915

creationtimestamp| type| source ---|---|--- 2023-12-21 10:12:44+00:00| seen| https://t.me/ctinow/157569...

MSC-2022-5915

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...