Astra Linux – Vulnerability in Firefox and Thunderbird

When accessing throttled streams, the number of available bytes that need to be checked in the calling function must be within limits. This may cause future code to be incorrect and vulnerable. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 105 and Firefox ESR 102.3. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...

CVE-2015-8710

再現ツール Mike Dalessio、Francois Chagnon、Florian Weingarten、Jun Kokatsu に感謝します。 BZ 746048 を参照してください。 Linux でのビルド root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...

mlkem-native

mlkem-native mlkem-native は、ML-KEM1 の安全で高速かつ移植性に優れた C902 実装です。 これは ML-KEM リファレンス実装3 のフォークです。 mlkem/src/ および mlkem/src/fips202/ 内のすべての C コードは、CBMC4 を用いてメモリ安全性（メモリオーバーフローなし）と型安全性（整数オーバーフローなし）が証明されています。すべての AArch64 および x8664 アセンブリは、HOL-Light5 を用いて、機能的に正しく、メモリ安全であり、秘密情報に依存しないタイミング（定数時間）であることが証明されています...

EUVD-2026-76467

In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...

CVE-2026-78547

CVE-2026-78547 is an Out-of-Bounds Write (CWE-787) in Citrix Workspace app for Windows , disclosed by Citrix on 2026-09-08. Exploitation requires physical access to the target system and low privileges, with high attack complexity. The vulnerability can lead to high impact on integrity and availa...

CVE-2026-39113

CVE-2026-39113: SQLiteのオプションSQLAR拡張機能におけるヒープバッファオーバーフロー 概要...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2026-78123

strongSwan (IKE/IPsec suite) versions 5.0.2 through 6.0.7 contain an expired pointer dereference (undefined memory access) in the openssl plugin during PKCS#7 container parsing , which can result in a crash and denial of service. The CVSS 3.1 score is 5.9 (Medium) with high attack complexity and ...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re...

CVE-2026-87480

Use after free in Printing in Google Chrome prior to 153.0.8010.36 all...

firefox: thunderbird: Use-after-free in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: ImageLib component...

CVE-2026-81646

CVE-2026-81646 is an out-of-bounds read vulnerability in the graphics module of Huawei consumer devices, as indicated by the vendor's September 2026 security bulletins covering phones, vision, wearables, and laptops . Successful exploitation may affect availability , with a CVSS 3.1 score of 5.9 ...

The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

RHEL 9 : glib2 (RHSA-2026:65768)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65768 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

CVE-2026-82061

A use-after-free security issue exists in the servers query execution...

The vulnerability of the vti6_siocdevprivate() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2026-58820

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58823

CVE-2026-58823 affects the Android platform, as indicated by the Android Security Bulletin reference (ASB-A-522376080, 2026-09-01). The vulnerability is a missing bounds check in the stpropnci_process_std function within stpropnci_std.cc, causing a memory safety issue. An attacker with local, low...