1990 matches found
PT-2026-84080
Improper Input Validation vulnerability in ash-project ash typescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ash typescript/typed controller/request handler.ex calls...
PT-2026-84087
Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.Type.UUIDv7 attribute. Ash.Type.UUIDv7.cast input/2 accepts any well-formed UUID string, including non-version-7 UUIDs, and stores it as a...
OPENSUSE-SU-2026:20660-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 boo1263158 CVE-2026-7363: Use after free in Canvas CVE-2026-7361: Use after free in iOS CVE-2026-7344: Use after free in Accessibility CVE-2026-7343: Use after free in Views CVE-2026-7333: Use afte...
Cast Component Data Compromise
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and compromise data integrity...
Cast Component Compromise Data Compromise
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...
Cast Component Compromise Data Compromise
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...
Cast Component DoS
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
Cast Component DoS
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2026-66569
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and struct tcuknode through the walker callback. u32bindclass unconditionally casts the passed fh to tcuknode and accesses &n-res, so whe...
CVE-2026-77551
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
CVE-2026-77551
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
CVE-2026-77551
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098865)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098865 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tbxdphandlerequest casts the...
CVE-2026-77551: Improper Access Control
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
PT-2026-82074
Name of the Vulnerable Software and Affected Versions UniFi Connect Display Cast Pro affected versions not specified Description An improper access control issue allows a malicious actor with network access to escalate privileges on the device under certain conditions. Recommendations At the...
CVE-2026-74685
A flaw was found in the Linux kernel's hwmon subsystem, specifically within the ltc4282 driver. When a negative value is passed to the ltc4282writecurr function, an incorrect type cast converts this input into a large positive value. This leads to an integer overflow, causing the current limit to...
CVE-2026-74685
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64: drivers/hwmon/ltc4282.c:ltc4282writecurr / need to pass it in millivolt / u32 in =...
UBUNTU-CVE-2026-74711
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus Fix type confusion in notification logic Sashiko reports: At the start of the loop in pmbusnotify, the code unconditionally casts every attribute to a struct sensordeviceattribute:...
CVE-2026-74685 hwmon: (ltc4282) Clamp negative current limits
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64: drivers/hwmon/ltc4282.c:ltc4282writecurr / need to pass it in millivolt / u32 in =...
EUVD-2026-64372
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64: drivers/hwmon/ltc4282.c:ltc4282writecurr / need to pass it in millivolt / u32 in =...