CVE-2026-110920

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110921

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

[SECURITY] [DSA 6563-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6563-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 15, 2026 https://www.debian.org/security/faq -...

CVE-2017-20286

A flaw was found in DevIL. A heap-based buffer overflow exists in its palette handling routine when decoding GIF Graphics Interchange Format files. By convincing a user or system to process a specially crafted GIF image, an attacker could trigger out-of-bounds memory writes, potentially leading t...

CVE-2026-55453

A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...

[SECURITY] [DSA 6562-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6562-1 [email protected] https://www.debian.org/security/ Andres Salomon October 15, 2026 https://www.debian.org/security/faq -...

CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

CVE-2026-110812

The Amazon Neptune engine contains a vulnerability where deserialization of untrusted data in the Gremlin graph data import component allows an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials . To remediate this issue...

CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

helge17 tuxguitar code injection vulnerability

Helge17 tuxguitar versions prior to 2.1.0 have a code injection vulnerability. This vulnerability stems from an untrusted.tg file that can set the gervil.soundbank.path parameter to reference a disk archive. Additionally, unvalidated class loaders are used to load classes provided by attackers,...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.0 have a buffer error vulnerability. This vulnerability stems from client heap out-of-bounds writes in the generalLumaToYUV444 and generalChromaV2ToYUV444 functions. A malicious RDP server can send specially crafted RDP GFX AVC444 or AVC444v2 frames to corrupt th...

Red Hat Enterprise Linux numerical error vulnerabilities

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have a numerical error vulnerability. This vulnerability stems from an integer overflow that occurs during the calculation of the memory buffer size for image dimensions by the GIMP’s file-pvr plugin. Attackers can exploit this vulnerability by...

Beijing Zhipu Huazhang ZCode security vulnerabilities

Beijing Zhipu Huazhang ZCode v3.11.2.6792 version has a security vulnerability. This vulnerability stems from the system’s ability to automatically establish connections with MCP servers specified in the repository workspace configuration. This could allow attackers to execute arbitrary code by...

DeepSeek Harness: Permissions and access control issues

The DeepSeek Harness c291e796 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from an untrusted search path, which may allow attackers to execute arbitrary code by providing and executing a specially crafted executable file instead of...

Alexandre Dulaunoy ssldump buffer error vulnerability

Alexandre Dulaunoy’s ssldump 1.9.0 and earlier versions contain a buffer error vulnerability. This vulnerability stems from an error in the calculation of the heap buffer allocation size by the fanxfingerprint function in ssl/sslxprint.c when formatting FAN/X.509 certificate fingerprints...

Lenovo Legion Zone Application deserialization injection vulnerability

Versions of the Lenovo Legion Zone Application prior to version 2.0.28.8182 contain a deserialization injection vulnerability. This vulnerability allows attackers to execute arbitrary code using the same logical network...

Lenovo Idea Tab Pro (TB373FU) has vulnerabilities related to trust management.

The Lenovo Idea Tab Pro TB373FU has a trust management vulnerability. This vulnerability arises because users with physical access rights can access unlocked tablets, bypassing device protections and executing arbitrary code...

[SECURITY] [DLA 4837-1] gst-plugins-good1.0 security update

Debian LTS Advisory DLA-4837-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 15, 2026 https://wiki.debian.org/LTS Package : gst-plugins-good1.0 Version : 1.22.0-5+deb12u4 CVE ID : CVE-2025-47183 CVE-2026-1940 CVE-2026-3083 CVE-2026-3085 CVE-2026-1707...

Astra Linux – Vulnerability in busybox

The BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client udhcpc6 DNSSERVERS option handler in the networking/udhcp/d6dhcpc.c file. This vulnerability allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response wit...

Astra Linux – Vulnerability in Firefox and Thunderbird

Memory safety bugs exist in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability ha...