CLEANSTART-2024-EJ47689 Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

Security vulnerability affects the chromium package. Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip...

CLEANSTART-2024-UT68300 Heap buffer overflow in Tab Groups in Google Chrome prior to 98

Security vulnerability affects the chromium package. Heap buffer overflow in Tab Groups in Google Chrome prior to 98...

CLEANSTART-2024-TG05908 Heap buffer overflow in ANGLE in Google Chrome prior to 98

Security vulnerability affects the chromium package. Heap buffer overflow in ANGLE in Google Chrome prior to 98...

CLEANSTART-2024-TC05917 Heap buffer overflow in Web UI Settings in Google Chrome prior to 101

Security vulnerability affects the chromium package. Heap buffer overflow in Web UI Settings in Google Chrome prior to 101...

CLEANSTART-2024-RI11595 Heap buffer overflow in WebGPU in Google Chrome prior to 101

Security vulnerability affects the chromium package. Heap buffer overflow in WebGPU in Google Chrome prior to 101...

CLEANSTART-2024-HW33804 Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101

Security vulnerability affects the chromium package. Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101...

CLEANSTART-2024-IR16037 Heap buffer overflow in DevTools in Google Chrome prior to 102

Security vulnerability affects the chromium package. Heap buffer overflow in DevTools in Google Chrome prior to 102...

CLEANSTART-2024-LO80114 Heap buffer overflow in WebRTC in Google Chrome prior to 103

Security vulnerability affects the chromium package. Heap buffer overflow in WebRTC in Google Chrome prior to 103...

CLEANSTART-2024-ZN11059 Heap buffer overflow in libwebp in Google Chrome prior to 116

Security vulnerability affects the chromium package. Heap buffer overflow in libwebp in Google Chrome prior to 116...

RLSA-2026:74084 Critical: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory access in ANGLE CVE-2024-7532 chromium-browser:...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

EUVD-2026-90389

iperf3 3.20–3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

CVE-2026-102505: Incorrect Calculation of Buffer Size

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...

AlmaLinux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776963378)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776963378 advisory. - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain functi...

Oracle Linux 8 : gvfs (ELSA-2026-73997)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73997 advisory. 1.36.2-22 - Fix heap buffer overflow in SFTP backend CVE-2026-84268 Resolves: RHEL-252300 Tenable has extracted the preceding description block directly from t...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_2470)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262470 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode...

CentOS Linux 8 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1780389355)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1780389355 advisory. - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in...

AlmaLinux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1780923998)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780923998 advisory. - A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containi...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_59496)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202659496 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service i...

Rocky Linux 10.2 [CIQ] Security Update: wget / wget-debuginfo / wget-debugsource Multiple Vulnerabilities (crlsa-2026_62142)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662142 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...