18372 matches found
Astra Linux – Vulnerability in Chromium
Memory access out of bounds in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption through a crafted HTML page. Chromium security severity: High...
PT-2026-54151
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A race condition in the DataTransfer component allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations...
ROS-20260401-73-0037
Vulnerability in vlc related to reading outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to cause a denial of service...
ROS-20260401-73-0003
Vulnerability in libpng related to reading outside buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2026-46574
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the GPU component allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from proces...
PT-2026-36232
Уязвимость компонента Angle браузера Google Chrome связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
ks_wlan_set_encode_ext() DoS
The vulnerability of the kswlansetencodeext function in the drivers/staging/ks7010/kswlannet.c module, which supports additional device support in Linux, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a...
Slackware: Security Advisory (SSA:2026-090-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] xz
New xz packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xz-5.2.13-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Fix a buffer overflow in lzmaindexappend. Fix invalid memory...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 146.0.7680.178 contained a security vulnerability caused by an out-of-bound read operation in the WebCodecs component. This vulnerability could allow remote attackers to execute an out-of-bound memory read...
IBM Concert Code Issue Vulnerability (CNVD-2026-16136)
IBM Concert is IBM's collaborative application lifecycle management platform. An information disclosure vulnerability exists in IBM Concert that stems from the program failing to properly clear buffer resources. An attacker could exploit the vulnerability to access sensitive information in memory...
Linux kernel media driver Write TS to Decoder
The vulnerability of the writetstodecoder function in the drivers/staging/media/av7110/av7110av.c file, a driver for preparing media data in the Linux operating system, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker...
Linux NTFS Heap Buffer Overflow DoS
The vulnerability of the miEnumattr function in the fs/ntfs3/record.c module of the NTFS file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...
PT-2026-40507
Уязвимость функции hci cmd sync queue once ядра операционных систем Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2026-46562
Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.53 Description An uninitialized use in WebML allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update to...
LB-LINK BL-WR9000 Sub Function DoS
The vulnerability of the sub44E8D0 function in the /goform/getvirtualCfg file of the LB-LINK BL-WR9000 microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1514)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1514 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent CVE-2025-71268 In the Linux kernel, the followi...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement
Detailed Report: https://oss-fuzz.com/testcase?key=4909459267977216 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
GHSA-W9F8-GXF9-RHVW Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories
Summary Any authenticated user can read other users' private memories via /api/v1/retrieval/query/collection Details Vulnerability 1: Missing authorization in collection querying In backend/openwebui/routers/retrieval.py, the querycollectionhandler function accepts a list of collectionnames but...
