2109 matches found
ROS-20260420-73-0025
Vulnerability in python-aiohttp related to lack of service data protection. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
ROS-20260414-73-0061
A vulnerability in the f2fsdecompresscluster function of the fs/f2fs/compress.c module of the F2FS file system of the Linux kernel is related to insufficient resource locking. Exploitation of the vulnerability may allow an intruder to affect the integrity and availability of protected information...
The vulnerability of the soup_filter_input_stream_read_line() function in the LibSoup library allows a hacker to gain unauthorized access to protected information.
The vulnerability of the soupfilterinputstreamreadline function in the LibSoup library related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerabilities of the `png_write_image_16bit()` and `png_write_image_8bit()` functions in the library for working with PNG bitmap graphics allow attackers to gain unauthorized access to protected information.
The vulnerability of the pngwriteimage16bit and pngwriteimage8bit functions in the PNG bitmap graphics library involves reading data from buffers that are beyond their allowable limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260408-73-0026
A vulnerability in the drivers/soc/qcom/mdtloader.c component of the Linux kernel is related to buffer copying without input data validation. Exploitation of the vulnerability allows an intruder to gain unauthorized access to protected information...
The vulnerability of RabbitMQ message brokers, related to the disclosure of information through registration files, allows attackers to gain unauthorized access to protected information.
The vulnerability of the RabbitMQ messaging broker is related to the exposure of information through registration files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the RDP client FreeRDP, related to reading beyond the buffer in memory, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...
The vulnerability of AppleScript components in macOS operating systems allows attackers to compromise the integrity of protected information.
The vulnerability of AppleScript components in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...
The vulnerability of the configd daemon in operating systems running macOS, which allows a perpetrator to compromise the accessibility of protected information
The vulnerability of the configd daemon in macOS operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...
The vulnerability of the Shortcuts component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Shortcuts component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the AppleEvents component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the AppleEvents component in macOS operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20260401-73-0001
A vulnerability in the HTML Style Checker module of RoundCube Webmail is related to incorrect encoding or escaping of output data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the j1939_session_activate() function in the net/can/j1939/transport.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information when working with j1939 CAN interfaces in Linux operating systems.
The vulnerability of the j1939sessionactivate function in the net/can/j1939/transport.c module, which handles J1939 sockets for CAN interfaces in Linux operating systems, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the snd_ac97_mixer() function in the sound/pci/ac97/ac97_codec.c module of the Linux kernel’s audio subsystem allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndac97mixer function in the sound/pci/ac97/ac97codec.c module of the Linux kernel’s audio subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2026-28855
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data...
The vulnerability of the `tx_macro_put_dec_enum()` function in the `sound/soc/codecs/lpass-tx-macro.c` module exposes the confidentiality, integrity, and accessibility of protected information within the Linux SoC kernel’s audio support mechanism. This vulnerability can be exploited by attackers to compromise these security aspects.
The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the cfusbl_device_notify() function in the net/caif/caif_usb.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cfusbldevicenotify function in the net/caif/caifusb.c module, which is part of the Linux kernel’s networking functions, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
The vulnerability of the `gen11_compute_sseu_info()` function in the `drivers/gpu/drm/i915/gt/intel_sseu.c` kernel module of the Linux operating system allows a hacker to access protected information or cause service failures.
The vulnerability of the gen11computesseuinfo function in the drivers/gpu/drm/i915/gt/intelsseu.c kernel module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
