CVE-2026-8000

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8000

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-43157

A flaw was found in the Linux kernel's octeontx2-af CGX driver. This vulnerability occurs because RX/TX flow-control bitmaps are allocated during initialization but are not properly freed when the driver is unbound and rebound. A local attacker could repeatedly unbind and rebind the driver, leadi...

CVE-2026-43156

A flaw was found in the Linux kernel's USB Pegasus driver. This vulnerability allows a local attacker to use a specially crafted USB device to bypass expected endpoint checks. By presenting unexpected transfer types, the malicious device could trigger a system assertion, potentially leading to a...

CVE-2026-43146

A flaw was found in the Linux kernel's iris media driver. When creating internal buffers, a buffer was added to a list before its Direct Memory Access DMA allocation was successfully completed. If the DMA allocation failed, a partially initialized buffer remained in the list. This could lead to a...

CVE-2026-43144

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. When the probe of an SDIO Secure Digital Input/Output brcmfmac device fails, for example due to missing firmware, an invalid bus pointer can be set. This incorrect state can lead to a kernel oops, which is a type of system crash, when...

CVE-2026-43142

A flaw was found in the Linux kernel's media: iris: gen1 driver. This vulnerability occurs because the driver fails to destroy internal buffers after the firmware releases them. This oversight leads to stale memory allocations, particularly when display resolutions change and new buffers are...

EUVD-2026-27838

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-43136

A flaw was found in the Linux kernel's Human Interface Device HID subsystem, specifically within the logitech-hidpp driver. A remote attacker, by connecting a specially crafted Universal Serial Bus USB device, could send malformed HID report descriptors that lack valid fields. This could lead to ...

CVE-2026-43135

A flaw was found in the Linux kernel's cx23885 media driver. Specifically, the sndcx23885hwparams function does not properly unmap resources when an error occurs. A local user could exploit this by repeatedly triggering the error path, leading to unreleased resources. This resource exhaustion can...

CVE-2026-8000

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8000

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-43131

A flaw was found in the Linux kernel. When the System Management Unit SMU is disabled during Reliability, Availability, and Serviceability RAS initialization, a null pointer dereference occurs within the drm/amd/pm module. This issue can lead to a system crash, resulting in a Denial of Service Do...

CVE-2026-43122

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI cpuidle driver. Due to an update in the acpiprocessorstart function, a NULL pointer dereference can occur if acpiprocessorpowerinit is called without a cpuidle driver. This vulnerability could allow a local...

CVE-2026-43094

A flaw was found in the Linux kernel's ixgbevf driver. When running on Hyper-V virtual machines, a missing operation in the driver's Hyper-V operations table can lead to a null pointer dereference during feature negotiation. This vulnerability allows a local user to trigger a system crash,...

CVE-2025-71290

A flaw was found in the tifpc202 driver within the Linux kernel. This vulnerability, a potential memory leak in the probe function, could allow a local attacker to cause a denial of service by exhausting system memory resources...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via unsafe string copying in the canonicalization process. An attacker can execute arbitrary code or cause a denial of service by supplying a specially crafted username in the MongoDB URI with authMechanism=GSSAPI before...

CVE-2025-71287

A flaw was found in the Linux kernel's mtk-smi driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during larb probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading t...

CVE-2025-71288

A flaw was found in the Linux kernel's mtk-smi memory driver. This vulnerability arises from the driver's failure to release device references during certain probe failures or when the driver unbinds. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS...

CVE-2025-71274

A flaw was found in the Linux kernel's rpmsg core. A race condition exists between the driveroverrideshow and driveroverridestore functions. This allows the driveroverride string to be freed while it is still being read, leading to a use-after-free vulnerability. This could potentially result in...