Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Zsh Shell Script Interpreter Input Validation

The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Zsh utils.c checkmailpath Buffer Overflow DoS

The vulnerability in the utils.c:checkmailpath command of the UNIX shell Zsh involves allowing the execution of commands beyond the data buffer’s allowed limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Gem Name Handler Code Generation Data Compromise

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

Samba krb5_extract_ticket Authentication Bypass

The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Google Chrome Use-After-Free

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Samba Synchronization DoS

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

Samba SMB1 Use-After-Free

The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Linux touch_pmd Heap Buffer Overflow DoS

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

WebRTC Technology Data Compromise

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

Linux KVM Architecture Buffer Overflow DoS

The vulnerability of the KVM virtualization subsystem in the Linux operating system’s arch/arm64/kvm/guest.c file is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...

Samba Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...

Linux C Library Directory Access Confidential Data Compromise

The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

WebRTC Confidential Data Compromise

The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...

Jackson-databind readValue Heap Buffer Overflow DoS

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library is related to improper validation of the data before it is deserialized. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

DNS Server Service Windows Server DoS

The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Mozilla Firefox Thunderbird Access Control Issue

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures...

Trace TCP/IP DHCPv6 DoS

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

OpenJPEG Encoding Buffer Overflow DoS

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...