CVE-2025-6191

Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2025-6192

CVE-2025-6192 is a Use-after-free vulnerability in Google Chrome/Chromium’s memory management related to Metrics/Profiler, allowing remote code execution via a crafted HTML page. Affected versions precede 137.0.7151.119 (Chrome stable channel; Chromium baseline). Debian security advisories confir...

CVE-2025-20260

creationtimestamp| type| source ---|---|--- 2025-06-18 17:39:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18798 2025-06-18 18:33:16+00:00| published-proof-of-concept| Telegram/0Gqa7yHMLnSRMpvEBFkbS1bZwf-5Db-LyNODVg59tHDTKas 2025-06-18 20:23:30+00:00| seen|...

CVE-2022-50204

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: pdata-quirks: Fix refcount leak bug In pdataquirksinitclocks, the loop contains offindnodebyname but without corresponding ofnodeput...

CVE-2022-49951

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix use-after-free during unregister In the following code within firmwareuploadunregister, the call to deviceunregister could result in the devrelease function freeing the fwuploadpriv structure before it is...

CVE-2022-50013

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use f2fsbugon in f2fsnewnodepage As Dipanjan Das reported, syzkaller found a f2fs bug as below: RIP: 0010:f2fsnewnodepage+0x19ac/0x1fc0 fs/f2fs/node.c:1295 Call Trace: writeallxattrs fs/f2fs/xattr.c:487 inline...

CVE-2022-50192

In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegraslinkremove After calling spiunregistermaster, the refcount of master will be decrease to 0, and it will be freed in spicontrollerrelease, the device data also will be freed, so it will lead a...

CVE-2022-50057

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr If ntfsfillsuper wasn't called then sbi-sb will be equal to NULL. Code should check this ptr before dereferencing. Syzbot hit this issue via passing wrong mount param as can be seen...

CVE-2022-50116

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. That means that the...

CVE-2025-20234 ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability...

CVE-2025-6128

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This affects an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2024-54183

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...

CVE-2025-45661

creationtimestamp| type| source ---|---|--- 2025-06-18 14:41:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18742 2025-06-18 17:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrvk5n5qaw2i...

CVE-2022-50159

In the Linux kernel, the following vulnerability has been resolved: of: check previous kernel's ima-kexec-buffer against memory bounds Presently imagetkexecbuffer doesn't check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic i...

CVE-2022-50063

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsatreechangetagproto works is that when dsatreenotify fails, it doesn't know whether the operation failed mid way in a multi-switch tree, or it faile...

CVE-2025-3602

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service DoS attacks on t...

CVE-2025-49176

creationtimestamp| type| source ---|---|--- 2025-06-18 14:10:54+00:00| seen| https://seclists.org/oss-sec/2025/q2/266 2025-06-23 06:45:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19184 2025-07-06 15:38:50+00:00| seen|...

CVE-2022-49952

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on probe Add the missing sanity check on the probed-session count to avoid corrupting memory beyond the fixed-size slab-allocated session array when there are more than FASTRPCMAXSESSIONS...

CVE-2025-24287

creationtimestamp| type| source ---|---|--- 2025-06-18 12:04:07+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2025 2025-06-18 23:41:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18827 2025-06-22 00:49:38+00:00| seen|...

CVE-2025-38051

creationtimestamp| type| source ---|---|--- 2025-06-18 11:17:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114704084142967074 2026-01-12 14:00:35+00:00| seen| Telegram/W42l9RcdLxVVinY3-dFB0tPHXweBIdMd-0K0xvZ1hMZjjcc 2026-02-20 14:25:22+00:00| seen|...