GHSA-FCQC-726X-5WFC vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Summary Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. Details vm2 exposes Buffer object to sandboxed code by default. Small Buffer allocations for example, Buffer.allocUnsafe, Buffer.fromarray, Buffer.fromstring, and Buffer.concat use the...

CVE-2016-6415-BenignCertain-Monitor

CVE-2016-6415-BenignCertain-Monitor إعادة تنفيذ لـ benigncertain-monitor الخاص بـ VirtueSecurity. لا يحتوي على جميع خيارات الحمولة نفسها كما في النسخة الأصلية، ولكنه يستبدل الثنائي bc-id بإثبات مفهوم أفضل من Ross Bradley يمكن توسيعه إذا لزم الأمر. الاعتمادات: تم كتابة وصيانة المراقب الأصلي بواسطة...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been addressed through improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may result in the disclosure of process memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: A out-of-bounds read occurred in the errout section of fbcondosetfont. When fbcondosetfont fails e.g., due to a memory allocation failure within vcresize under heavy memory pressure, it jumps to the errout label to...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Network component of Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Mediu...

Astra Linux – Vulnerability in Chromium

The use of uninitialized variables in the GPU in Google Chrome prior to version 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap out-of-bounds read vulnerability in the coders/dcm.c module. When processing DICOM files with certain configurations, the decoder loop...

Astra Linux – Vulnerability in glibc

The wordexp function in the GNU C Library also known as glibc, up to version 2.33, may crash or access arbitrary memory during the parseparam function located in posix/wordexp.c when called with an untrusted, crafted pattern. This could potentially lead to a denial of service or the disclosure of...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

CVE-2026-59782 JavaScript preprocessing memory disclosure

The JavaScript preprocessing Duktape engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator...

CVE-2026-59782

The Zabbix server is vulnerable to a memory disclosure issue within its JavaScript preprocessing (Duktape) engine. A limited administrator can read raw heap data , which may lead to the leakage of sensitive data from other concurrent preprocessors that the administrator is not authorized to acces...

CVE-2026-59782 JavaScript preprocessing memory disclosure

The JavaScript preprocessing Duktape engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator...

CVE-2026-19185

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

Security update for cups

This update for cups fixes the following issue: CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure bsc1263116. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2026:4447-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure bsc1263116...

EUVD-2026-92286

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 مختبر أبحاث الأمان CVE-2025-14847 | CVSS 8.7 عالي | تسريب غير مصادق عليه للذاكرة CVE-2025-14847 ، المسمى MongoBleed ، يسمح للمهاجمين عن بُعد غير مصادق عليهم بتسريب ذاكرة كومة غير مهيأة عن طريق استغلال منطق فك الضغط zlib في MongoDB. هذا الخلل عالي الخطورة يكشف آثارًا...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...