The vulnerability of the Content Credentials SDK libraries arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Content Credentials SDK libraries exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Content Credentials SDK library functions is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...

The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260622-73-0021

The vulnerability in Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260622-73-0036

The vulnerability of the consumePhrase function in the Go programming language is related to insufficient validation of input data during the analysis of email addresses. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2026-48982

pamusb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, when updating a one-time pad file, a temporary file is created using open without the OEXCL flag. Without OEXCL, the create operation is not atomic: two concurrent processes racing to...

The vulnerability of the OpenNebula cloud management platform for virtual machines, related to the lack of measures taken to sanitize input data, allows a perpetrator to trigger a service failure.

The vulnerability of the OpenNebula cloud management platform for virtual machines is related to the lack of measures taken to sanitize input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures...

The vulnerability of the mlx5eResetTxqsqCCPCc() function in the Linux operating system kernel driver allows a hacker to cause a service failure.

The vulnerability of the mlx5eResetTxqsqCCPCc function in the Linux kernel driver mlx5 is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the tcp_write_xmit() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the tcpwritexmit function in Linux operating systems is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker to cause service failures remotely...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7107: Backport to 4.18.z CLONE - ODF Console is breaking DFBUGS-7064: RHODF 4.18.24 release DFBUGS-7046:...

What Changed in OWASP Top 10 2025 and Recommendations for Each Category

Key Takeaways 1. The 2025 list introduces two new categories – Software Supply Chain Failures A03 and Mishandling of Exceptional Conditions A10 - reflecting attacks already happening in production. 2. Security Misconfiguration jumping from 5 to 2 signals that continuous deployment without...

ROS-20260615-73-0033

The vulnerability of the RDP client FreeRDP is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260615-73-0034

The vulnerability of the freerdpbitmapdecompressplanar function in the RDP client FreeRDP is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260615-73-0035

The vulnerability of the rtsreadauthverifiernochecks function in the FreeRDP client is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the FreeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the FreeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow a malicious...

The vulnerability of the miSyncDestroyFence() function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the miSyncDestroyFence function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause service...

Improper Handling Of Exceptional Conditions

@hulumi/drift is vulnerable to Improper Handling of Exceptional Conditions. The vulnerability is due to the classifier ignoring adapter execution failures and relying only on detection results, which allows transient adapter errors to mask real drift or incorrectly escalate normal activity to...

ROS-20260611-73-0012

The vulnerability of the cleardecompressresidualdata function in the RDP client FreeRDP is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...