251151 matches found
MAL-2026-15668 Malicious code in core_main (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64170304c1f55aeeca3c096c224c5fe6301dafbd331bb943d08fc1a4bf0588f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15671 Malicious code in quartz-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f59477bf2399742c785aa97d80d04b4800f66446ae3635167ba173d96080a91 On npm install, the package's preinstall hook package.json scripts.preinstall = node index.js executes index.js, which reads the installer's OS...
ASB-A-485377744
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-491543354
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
PUB-A-508716759
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-511318880
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
UBUNTU-CVE-2026-84142
Unknown description...
OPENSUSE-SU-2026:11658-1 exiv2-0.28.9-1.1 on GA media
These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed...
UBUNTU-CVE-2026-84125
Unknown description...
ASB-A-500022799
In tipcbufappend of msg.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-510136422
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-508704693
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-508692752
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-482992246
In hidppprobe, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
UBUNTU-CVE-2026-84145
Unknown description...
PUB-A-508704568
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
PUB-A-508686178
In bigoworkerthread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-499053500
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...