CVE-2026-13478: Out-of-bounds Read

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2initfs subsys/fs/ext2/ext2impl.c by passing fsblocks = sblockscount - sfirstdatablock to ext2bitmapcountset. That helper subsys/fs/ext2/ext2bitmap.c treats its argument as a number of bits and reads one bitmap byte per...

CVE-2026-13215: Out-of-bounds Write

The Zephyr ext2 filesystem driver fails to validate the slogblocksize field of the on-disk superblock when mounting a filesystem. ext2verifydisksuperblock in subsys/fs/ext2/ext2impl.c checks the magic number, revision, inode size and group counts, but never bounds slogblocksize. On a successful...

PT-2026-81732

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition exists in the FileSystem component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by usi...

PT-2026-81766

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in the FileSystem component. A remote attacker can use social engineering to lure a user to a crafted HTML page, enabling the reading of memory outside the...

PT-2026-81835

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a us...

CVE-2026-79276: Improper Privilege Management

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81676

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-81570

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper handling of case sensitivity in the FileSystem allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HT...

PT-2026-81722

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81473

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export state and import state tools in src/consciousness-explorer/mcp/server.js pass the...

Linux kernel ext2_fill_super Heap Buffer Overflow DoS

The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Squashfs File System Cache Overflow

The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2unlink function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel F2FS is_alive check_index_in_prev_nodes

The vulnerability of the isalive function fs/f2fs/gc.c and the checkindexinprevnodes function fs/f2fs/recovery.c in the Linux kernel-based file system F2FS lies in the reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

CVE-2026-74722

A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

K000163062: Node.js vulnerability CVE-2026-56847

Security Advisory Description A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...