29707 matches found
CVE-2026-59187
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...
UBUNTU-CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...
CVE-2026-79675
creationtimestamp| type| source ---|---|--- 2026-08-25 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7qg74h2u 2026-08-25 18:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfz2x7pl2e 2026-08-25 22:40:04+00:00| seen|...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that functions pppol2tpprocopen and l2tpdfsseqopen store the iteration status of tunnels and sessions in private data called seqfile. When the user space terminates the process/proc.net/pppol2tp...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...
CVE-2026-74718
A flaw was found in the devlink component of the Linux kernel. When the devlinknlreloaddoit function is called, it may fail to release a network namespace reference under specific error conditions. This oversight occurs when the requested network namespace differs from the current one and the...
CVE-2026-78679
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...
CVE-2026-78679
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...
SUSE CVE-2026-68427
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1xboclearcachedmappings host1xbounpin drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cach...
SUSE CVE-2026-74432
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsgMSGPEEK Fix rxrpcrecvmsg to also drop the ref it holds on an already-released call if MSGPEEK is in force the function holds a ref on the call irrespective of whether MSGPEEK is specifie...
CVE-2026-78466: Undefined Security Weakness
The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...
PT-2026-81832
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An incorrect reference resolution in the WebView component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts...
PT-2026-81814
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect reference resolution in CustomTabs allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome ...
PT-2026-81816
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An externally controlled reference in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code...
Linux kernel TCM Driver DoS
The vulnerability in the targetcoreitemdbrootstore function within the drivers/target/targetcoreconfigfs.c file of the Linux kernel TCM driver is related to a lack of a reference to an active descriptor or file index. Exploitation of this vulnerability may allow an attacker to cause a denial of...
Linux kernel futex syscall Data Compromise
The vulnerability in the SYSCALLDEFINE4 function within the kernel/futex/syscalls.c module of the Linux operating system is related to errors occurring during reference count updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-79103: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78942: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-10630: Authorization Bypass Through User-Controlled Key
The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...