co.paralleluniverse:comsat-tomcat-loader (0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.3) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.1 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc3) potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.0 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.3) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.1 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc3) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.0 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc3) potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.0 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7.5), com.intersult:maven-loader (>=1.2, <=1.3) +11 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.28)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.5 - com.intersult:maven-loader =1.2, =16, =16,...

co.paralleluniverse:comsat-tomcat-loader (0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.3) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.1 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc3) potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.0 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.3) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.1 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.3) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.1 -...

co.paralleluniverse:comsat-tomcat-loader (0.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc3) potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - co.paralleluniverse:comsat-tomcat-loader 0.1.0 -...

Fake Claude search results lure Mac users into ClickFix attack

Researchers found that cybercriminals are using sponsored search results and shared Claude chats to lure victims into a typical ClickFix attack to install malware on macOS devices. ClickFix is a social engineering method that tricks users into infecting their own device with malware. Users are...

CVE-2026-7482

A flaw was found in Ollama. A remote attacker can exploit a heap out-of-bounds read vulnerability in the GGUF model loader by providing a specially crafted GGUF GGML Unified Format file to the /api/create endpoint. This allows the attacker to read beyond the allocated memory buffer, potentially...

EUVD-2026-29347

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

MilanLaunchy Firmware Loader

References CVE-2021-26315: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1021.html CVE-2024-21944: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html CVE-2024-21981: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html &...

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963

Barebox EFI PE loader (efi/loader/pe.c) contains multiple memory-safety vulnerabilities in versions prior to 2026.04.0: (1) 32-bit arithmetic overflow in virtual image size calculation on section VirtualAddress/size can cause undersized heap allocations, and (2) PE section loading does not valida...

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...