Photon OS 5.0: Libarchive PHSA-2025-5.0-91-0672

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0672. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for Heap-based Buffer Overflow in Libarchive

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-devi...

CVE-2026-5915 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-5915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write v...

CVE-2026-5915

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5915

Google Chrome versions prior to 147.0.7727.55 are vulnerable to an out-of-bounds memory write due to insufficient validation of untrusted input in the WebML component. A remote attacker can exploit this by serving a crafted HTML page , potentially leading to service interruptions or execution of ...

CVE-2026-5915

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Low...

CVE-2026-5915

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 17:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3eq5s3te2j 2026-04-12 20:00:00+00:00| seen|...

SUSE-SU-2025:02718-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

openSUSE Security Advisory (SUSE-SU-2025:02566-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2025-0200 Updated libarchive packages fix security vulnerabilities

Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c. CVE-2025-5914 Heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c. CVE-2025-5915 Integer overflow while reading warc files at archivereadsupportformatwarc.c. CVE-2025-5916 Off by one error in...

Ubuntu: Security Advisory (USN-7601-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5915

creationtimestamp| type| source ---|---|--- 2025-06-09 20:31:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17767 2025-06-09 23:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7j4arom62u 2025-07-30 12:00:54+00:00| seen|...

CVE-2025-5915

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...

CVE-2020-5915

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust...

Palo Alto GlobalProtect Agent Privilege Escalation (CVE-2024-5915)

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows devicesenables a local user to execute programs with elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrary code on susceptible instances. The flaw, tracked as CVE-2024-28986 CVSS score: 9.8, has been described as a deserialization bug. "SolarWinds Web...

CVE-2023-5915

creationtimestamp| type| source ---|---|--- 2023-12-21 10:12:44+00:00| seen| https://t.me/ctinow/157569...

CVE-2020-5915

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust...