211998 matches found
CVE-2026-79106: Improper Input Validation
Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EulerOS Virtualization 2.13.0 : python3 (EulerOS-SA-2026-3235)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted t...
Linux Distros Unpatched Vulnerability : CVE-2026-76816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...
RockyLinux 8 : python-pyasn1 (RLSA-2026:59241)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59241 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...
Google Chrome < 152.0.7977.64 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0256176589 advisory. - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allow...
Linux kernel USB Network DoS
The vulnerability in the kawethprobe function within the drivers/net/usb/kaweth.c file of the Linux kernel’s USB network adapter driver is related to improper validation of input data consistency. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel security subsystem Buffer Overflow DoS
The vulnerability of the securityfscontextdup function in the security/security.c module of the Linux kernel’s security subsystem is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability could allow an attacker to cause a service failure...
arch/arm64/kernel/sys_compat.c Heap Buffer Overflow DoS
The vulnerability of the compatarmsyscall function in the arch/arm64/kernel/syscompat.c module of the Linux operating system’s 64-bit ARM architecture kernel is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
netfilter RBAC Use-After-Free
The vulnerability of the functions nftrbtreegcelem and nftrbtreeinsert in the net/netfilter/nftsetrbtree.c module of the netfilter component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel USB network adapter driver DoS
The vulnerability in the kalmiabind function within drivers/net/usb/kalmia.c of the Linux kernel USB network adapter driver is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel ext2_fill_super Heap Buffer Overflow DoS
The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux HyperV Guest Mode Driver Use-After-Free
The vulnerability of the mshvpartitioncreateregion function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel driver for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...
Linux BPF Heap Buffer Overflow DoS
The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
JetBrains TeamCity < 2018.2.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2018.2.2. It is, therefore, affected by multiple vulnerabilities: - Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2018.2.2. CVE-2019-12841 - A...
Linux Ext4 Heap Buffer Overflow DoS
The vulnerability in the ext4featuresetok function within the fs/ext4/super.c file of the Ext4 filesystem in the Linux kernel is related to improper validation of input data consistency. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel S390 DoS
The vulnerability in the dosyscall function within the arch/s390/kernel/syscall.c module for the S390 platform in the Linux kernel is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
RHEL 8 : python-pyasn1 (RHSA-2026:59246)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59246 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
CVE-2026-79105: Improper Input Validation
Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
PT-2026-81458
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...