CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw in device-mapper-multipath allows a local user to trigger an out-of-bounds read by sending a command containing a format string with a trailing percent character to the multipath daemon . This vulnerability can result in information disclosure by exposing unintended daemon memory or cause ...

EUVD-2026-106990

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-113199

A flaw was found in the Payments component of chromium-browser. An out-of-bounds read vulnerability allows a remote attacker to access memory within the browser's isolated sandbox environment by tricking a user into visiting a crafted HTML page. Successful exploitation leads to information...

CVE-2026-113045

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Offline feature allows a remote attacker to access memory contents inside the application sandbox by convincing a user to open a crafted HTML page. Successful exploitation could lead to unauthorized information...

CVE-2026-113309

A flaw was found in the Media component of chromium-browser. This vulnerability allows a remote attacker to cause an information disclosure by triggering an out-of-bounds read. By persuading a user to load a specially crafted HTML page, an attacker can access sensitive memory contents within the...

CVE-2026-113070

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the GetUserMedia component allows a remote attacker to read memory inside the browser sandbox by enticing a user to view a crafted HTML page. This issue results in information disclosure and may expose sensitive data...

CVE-2026-113010

An out of bounds read flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518240362 https://code.google.com/p/chromium/issues/detail?id=113010...

PT-2026-120209

Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to escape their object key prefix through an unsanitized filename splat segment. Attackers holding one valid API key can supply ../ sequences ...

PT-2026-120494

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

PT-2026-120642

Name of the Vulnerable Software and Affected Versions NTPsec ntpd versions 1.1.4 through 1.2.5 Description An out-of-bounds read occurs during the parsing of NTS extension fields. A remote attacker can cause the daemon to crash by providing an NTS Authenticator and Encrypted Extension Fields AEEF...

PT-2026-120641

Name of the Vulnerable Software and Affected Versions NTPsec ntpd versions prior to 1.2.6 Description An out-of-bounds read exists in the Motorola Oncore refclock driver. An attacker who controls the GPS receiver's serial data can cause the ntpd process to crash or disclose memory by sending a PP...

PT-2026-120741

pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...

PT-2026-120712

Name of the Vulnerable Software and Affected Versions Open Source Snort 3 affected versions not specified Description An issue exists in the control channel socket implementation where a lack of authentication allows an authenticated local attacker with low privileges to connect to the socket. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-113201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-113246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-113098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted...