252870 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL (CVE-2026-82418)
Summary IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition, due to versions of OpenSSL included in wheels prior to cryptograph 48.01 which could allow specially crafted PKCS7 or S/MIME signed messages to trigger a use-after-free during PKCS7 signature verification...
Out-of-bounds Write
Overview Pillow is a PIL Python Imaging Library fork. Affected versions of this package are vulnerable to Out-of-bounds Write via the seek method in multiple multi-frame image format plugins DCX, JPEG, MIC, MPO, PSD, when an image's mode or size changes between frames during a seek operation. The...
CVE-2026-16477
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
EUVD-2026-108208
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
CVE-2026-16477 Insecure Deserialization of .cleanshot Files in CleanShot X
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
CVE-2026-16477
The software CleanShot X for macOS is vulnerable to an insecure deserialization flaw when processing .cleanshot project files (used for editable screenshot annotations). An attacker can craft a malicious file that, when opened by a target user, triggers automatic execution of a payload during the...
CVE-2026-16477 Insecure Deserialization of .cleanshot Files in CleanShot X
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
OESA-2026-4482 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4452 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Sandbox escape in the Security: Process Sandboxing component of Mozilla Firefox. An attacker could exploit this vulnerability to break out of the browser's process sandbo...
OESA-2026-4451 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Sandbox escape in the Security: Process Sandboxing component of Mozilla Firefox. An attacker could exploit this vulnerability to break out of the browser's process sandbo...
httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias
A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...
DEBIAN-CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...
EUVD-2026-108169
A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...
kernel: ipv4: validate checksum_start before completing checksum
A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...
vulnerabilities in the FreeBSD bhyve hypervisor
The FreeBSD community has addressed several vulnerabilities in the bhyve Hypervisor. These vulnerabilities involve race conditions, incorrect validation, and synchronization issues in various device models within the bhyve Hypervisor. A malicious guest virtual machine can exploit these errors to...
kernel: ipv4: validate checksum_start before completing checksum
A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...
kernel: ALSA: seq: close a re-opened queue timer in the destructor
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...
kernel: xfs: bounds-check buffer log item's dirty bitmap
A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...
libreoffice: libreoffice: Arbitrary code execution via remote Java database driver
A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...