Astra Linux – Vulnerability in dcmtk

There is an improper array index validation vulnerability in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to exploit this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-80964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe...

CVE-2026-89492

CVE-2026-89492 is a slab out-of-bounds read in the Linux kernel's OCFS2 filesystem. The functions ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() fail to bound the ocfs2_dx_entry_list counts against the 4 KB block capacity. As a result, ocfs2_dx_dir_search() can walk up to 0xffff entries pa...

CVE-2026-80972

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe time...

CVE-2026-80969 ALSA: mpu401: Check card index validity at probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

UBUNTU-CVE-2026-79591

A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74509

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87500

CVE-2026-87500 is an improper validation of array index in ANGLE , the cross-platform 2D/3D graphics library used by Google Chrome , in versions prior to 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to potentially execute arbitrary code outside the Chrome sandbox . T...

Linux Distros Unpatched Vulnerability : CVE-2026-87500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the...

PT-2026-88600

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices relates to the improper checking of specified indices, positions, or offsets within input data. Exploiting this vulnerability could allow an attacker to...

CVE-2026-80552

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability occurs because the system fails to properly validate index ranges for read/write operations on existing regions. This oversight could allow an attacker to perform out-of-bounds memory access, potentially leadin...

AZL-97827 CVE-2026-80552 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing...

PT-2026-82174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libceph module where a corrupted osdmap received from a Ceph monitor or OSD may contain invalid osd indices in its pg temp, primary temp, pg upmap, and pg upmap...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed the idx validation in config queues msg. Ensured that idx is within the range of active/initialized TC’s when iterating over vf-chidx in i40evcconfigqueuesmsg...

Astra Linux - Vulnerability in golang-gogoprotobuf

A issue was discovered in GoGo Protobuf before version 1.3.2. The plugin/unmarshal/unmarshal.go file lacks certain index validations, also known as the “skippy peanut butter” issue...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextodep and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer ep...