CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

GHSA-X5WW-48C3-RP9J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6J37-MH6C-P74W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7JV8-R36R-863G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6M3V-59WP-4J9Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V6J9-JH3Q-JQQ6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-43CM-8P8Q-H9J3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G538-2VJJ-8JX9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GQ66-W869-W9PW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-49509

Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...

CVE-2026-71222

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

EUVD-2026-69708

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

UBUNTU-CVE-2026-84640

A maliciously constructed mail header could lead to a one byte read pa...

CVE-2026-84118

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84125

A use-after-free vulnerability in the DOM: Core & HTML component of Firefox could allow a remote attacker to execute arbitrary code , according to Red Hat's assessment. The CVSS 3.1 score is 5.4 (Medium) with a network attack vector, low complexity, no required privileges, but user interaction re...

ASB-A-503553866

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-506109174

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-522366268

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

ASB-A-522376080

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...