DEBIAN-CVE-2026-95316

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium security severity: Low...

CVE-2026-95316

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium security severity: Low...

dtrace-memaccess_cve-2020-27949

Lectura y escritura de memoria de otros procesos usando fasttrap El dispositivo /dev/fasttrap para crear nodos de trampa en procesos de espacio de usuario para los proveedores pid y objc tiene los permisos 666. En contraste con /dev/dtrace, que también es 666, fasttrap carece de una verificación ...

Astra Linux – Vulnerability in Chromium

A vulnerability was identified in GWP-ASan in Google Chrome prior to version 149.0.7827.53, allowing a local attacker to obtain potentially sensitive information from process memory through a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, from version 5.19.9 onwards, the drivers/scsi/stex.c file allows local users to access sensitive information from kernel memory. This occurs because the stexqueuecommandlck function lacks a memset for the PASSTHRUCMD case...

Astra Linux – Vulnerability in Linux-Firmware

A GPU kernel can read sensitive data from another GPU kernel even from another user or application through an optimized GPU memory region called local memory on various architectures...

EUVD-2026-72793

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

PT-2026-87098

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

PT-2026-87083

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

PT-2026-87097

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to access already freed memory. This issue affec...

PT-2026-87082

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

CVE-2026-21072

A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...

CVE-2026-18011

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17932

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66251

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66285

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description An inappropriate implementation in Views allows a local attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations...

CVE-2026-61389

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...

PT-2026-58875

Name of the Vulnerable Software and Affected Versions ASUS System Control Interface v3 affected versions not specified ASUS System Control Interface affected versions not specified ASUS Business Manager affected versions not specified Description An out-of-bounds read exists in the software that...