PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Libexif Heap Buffer Overflow DoS

The vulnerability of the exifmnotedatagetvalue function in the library for parsing EXIF files in Libexif files involves a numerical loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

libheif Heap Buffer Overflow DoS

The vulnerability of the HeifPixelImage::overlay function in the file format decoder and encoder of the libheif library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

MinIO extractMetadataFromMime DoS

The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Unbound DNSSEC DoS

The vulnerability of Unbound DNS server’s DNSSEC validator is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2026-45084

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...

Missing Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization through the deletechatbyid process. An attacker can disrupt another user's active chat generation tasks by sending a DELETE request to the relevant endpoint if they possess the target...

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

In this article 1. What is device isolation? 2. Case study: QNET 3. Attack chain overview 4. MITRE ATT&CK techniques observed 5. References 6. Learn more Microsoft Defender's attack disruption now includes device isolation, a new response action that extends autonomous protection directly to...

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

In this article 1. What is device isolation? 2. Case study: QNET 3. Attack chain overview 4. MITRE ATT&CK techniques observed 5. References 6. Learn more Microsoft Defender's attack disruption now includes device isolation, a new response action that extends autonomous protection directly to...

CVE-2026-70476: Improper Access Control

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept...

PT-2026-67923

Summary Several organization billing endpoints accept attacker-controlled Stripe identifiers subscriptionId without verifying that the identifier belongs to the authenticated user's organization. This allows an authenticated attacker to perform unauthorized Stripe subscription operations on other...

ROS-20260804-73-0010

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260804-73-0036

The vulnerability of the kvmallocnodenoprof function in the Linux operating system is related to the execution of operations beyond the memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260804-73-0017

The vulnerability of the fs/btrfs kernel component in the Linux operating system relates to operations involving resources after their expiration or release. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

ROS-20260804-73-0041

The vulnerability of the functions mdiobusPhysuspend and mdiobus Phyresume in the drivers/net/phy/phydevice.c file of the Linux physical-layer network driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

PT-2026-67822

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Several organization billing endpoints accept attacker-controlled Stripe identifiers without verifying that the identifier belongs to the authenticated user's organization. This allows an authenticat...

FreeRDP Glyph Cache Buffer Overflow DoS

The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP involve reading beyond the permitted range of memory. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...

ROS-20260804-73-0022

The vulnerability of the qcom/venus/hfivenus.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure...