CVE-2026-79273

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79049

Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79103

CVE-2026-79103 is an incorrect reference resolution vulnerability in the Speech component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation . Chromium rates the severity as Mediu...

CVE-2026-79049

CVE-2026-79049 is a medium-severity vulnerability in Google Chrome's Passwords component, caused by an incorrect reference resolution that allowed a remote attacker to bypass system access restrictions via a crafted file. The flaw affected Chrome versions prior to 152.0.7977.65 , where a fix was ...

EUVD-2026-63621

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-76039

A flaw was found in Chromium, specifically in its Core component on Android. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to obtain sensitive information. By leveraging social engineering and a specially crafted HTML page, an attacker could exploit this...

The vulnerability of the `usbnet_disconnect()` function in the `drivers/net/usb/usbnet.c` file of the Linux network adapter driver module allows a hacker to cause a service failure.

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Web application network firewall library OWASP Coraza WAF lies in the use of a name with an incorrect reference. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Web application firewall library OWASP Coraza WAF is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

ROS-20260430-73-0011

Vulnerability in golang related to incorrect reference definition before accessing a file. Exploitation of the vulnerability may allow an attacker to escalate his privileges...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect reference when adjusting the of the time management mechanism. This could lead to...

GHSA-W87R-VG9Q-CRQM zx Uses Incorrectly-Resolved Name or Reference

When zx is invoked with --prefer-local=, the CLI creates a symlink named ./nodemodules pointing to /nodemodules. Due to a logic error in src/cli.ts linkNodeModules / cleanup, the function returns the target path instead of the alias symlink path. The later cleanup routine removes what it received...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect reduction of reference counts on the wrong path, which could lead to permanent locking of...

NASA Interplanetary Overlay Network 安全漏洞

NASA Interplanetary Overlay Network is a NASA implementation of a Delay/Disruption Tolerant Network DTN. A security vulnerability exists in NASA Interplanetary Overlay Network BPv7 version 4.1.3, which originates when a packet is received with an incorrect reference to the imc scheme that has a...

ROS-20240704-09

Vulnerability of the chronyd daemon implementation of Network Time Protocol NTP Chrony is related to incorrect reference definition before accessing a file in /var/run/chrony directory. Exploitation the vulnerability could allow an attacker to cause a denial of service by using a specially crafte...

CVE-2024-26957

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcryptcard. The reason was an...

CVE-2024-26957

CVE-2024-26957 relates to the Linux kernel’s s390/zcrypt subsystem, where reference counting on zcrypt card objects was fixed to prevent a use-after-free of the zcrypt_card during hot-plug/probe/remove cycles. The issue could allow freeing a zcrypt card object while it is still in use, as demonst...

CVE-2024-26957 s390/zcrypt: fix reference counting on zcrypt card objects

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcryptcard. The reason was an...

CVE-2024-26957 s390/zcrypt: fix reference counting on zcrypt card objects

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcryptcard. The reason was an...

Use-After-Free

Firefox and Thunderbird are vulnerable to a use-after-free vulnerability. The vulnerability is due to incorrect reference counting, where assigning an AlignedBuffer to itself can lead to an incorrect reference count and subsequent use-after-free...

CVE-2024-3861

The Mozilla Foundation Security Advisory describes this flaw as: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free...