24386 matches found
CVE-2026-102620
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...
UBUNTU-CVE-2026-102620
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...
CVE-2026-102620 Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...
CVE-2026-97931
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture US122L audio driver, which can lead to memory corruption or a Denial of Service DoS. The driver improperly permits read-only memory mappings to be upgraded to writable. A local user with read and write permissions to th...
CVE-2026-102317
Google Chrome on Windows versions prior to 154.0.8037.92 is affected by an improper privilege management vulnerability within the Mojo inter-process communication (IPC) framework. A local attacker can exploit this flaw by running a crafted local program to bypass the browser's sandbox security bo...
CVE-2026-97925
A flaw was found in the Linux kernel's timer tick broadcast subsystem. A race condition occurs when installing a replacement clock event device concurrently with ongoing tick broadcast operations, causing the system to attempt to arm a detached timer device. If the central processing unit CPU...
CVE-2026-97924
A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...
CVE-2026-97922
A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...
CVE-2026-76737
A path traversal vulnerability exists in the command line interface of HPE Networking Instant On . This authenticated vulnerability allows an attacker with administrative access to modify a limited set of files on the underlying operating system and interrupt the normal operation of the affected ...
CVE-2026-76736 Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...
CVE-2026-76736
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On . A low-privilege authenticated local attacker could successfully exploit this flaw to interrupt the normal operation of the affected service, leading to a Denial-of-Service (DoS). No specific e...
EUVD-2026-89355
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...
CVE-2026-76735 Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On
A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to netwo...
CVE-2026-12345
A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...
CVE-2026-97918
A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...
CVE-2026-97915
A flaw was found in the Linux kernel's Intel Versatile Processing Unit accel/ivpu driver. The driver fails to verify that firmware-supplied log names are null-terminated before printing them. This issue causes an out-of-bounds memory read that can leak adjacent data from shared memory buffers int...
CVE-2026-97913
A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. This vulnerability can lead to a Denial of Service DoS through device timeouts or potential out-of-bounds memory access. A local user could exploit this issue by submitting a crafted command stream that lacks a required...
CVE-2026-102823
Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...
DEBIAN-CVE-2026-95315
Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...