CVE-2026-68538

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

EUVD-2026-124055

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68538 fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68538

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

PT-2026-145539

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

EUVD-2012-2798

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2011-1691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets CSS implementation in WebCore in WebKit before r82222, as used i...

SUSE CVE-2010-1784

The counters functionality in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of servi...

Apple Safari RenderCounter Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CSS...

CVE-2012-2818

CVE-2012-2818 is a use-after-free in Google Chrome prior to 20.0.1132.43, triggered by document layout involving CSS counters. Exploitation could cause a denial of service or other unspecified impact. The connected documents confirm this CVE is listed among Chrome/OpenSUSE patch advisories, but d...

CVE-2012-2818

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets CSS counters feature...

CVE-2012-2818

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets CSS counters feature...

CVE-2012-2818

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets CSS counters feature...

CVE-2012-2818: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets CSS counters feature...

PT-2012-4279

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly hav...