Astra Linux – Vulnerability in Chromium

Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In Skia, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to upstream tag...

SUSE-SU-2026:4339-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to upstrea...

Denial Of Service

Apache CXF is vulnerable to Denial Of Service. The vulnerability is due to incomplete mitigation of attachment-header processing, allowing an attacker to send a message containing many attachment headers and cause excessive resource consumption...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

kernel: af_unix: Drop all SCM attributes for SOCKMAP

A flaw was found in the Linux kernel's afunix component, specifically within its SOCKMAP feature. This vulnerability stems from the kernel's improper handling of Socket Control Message SCM attributes when data is passed to the SOCKMAP layer. This can lead to a use-after-free condition, which may...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

CVE-2026-96764

A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The...

CVE-2026-96764

A vulnerability exists in kvcache-ai mooncake versions up to 0.3.12/0.3.14-rc1 . The flaw is located in the Regular Expression Handler component, specifically within the MasterService::GetReplicaListByRegex function. An attacker can perform a remote manipulation that leads to an allocation of res...

EUVD-2026-85753

A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The...

CVE-2026-96764 kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources

A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The...

Fedora 45 : perl-HTML-FormHandler (2026-406a152d49)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-406a152d49 advisory. HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method CVE-2026-85630...

PT-2026-97810

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions 1120.00 through 1120.01 IBM PowerVM Hypervisor versions 1110.00 through 1110.31 IBM PowerVM Hypervisor versions 1060.00 through 1060.81 IBM PowerVM Hypervisor versions 950.00 through 950.H3 Description A flaw...

PT-2026-97736

Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to 1.11.00.022 Description Improper Access Control allows unauthorized access or modification of resources within the system. Recommendations Update to version 1.11.00.022 or later...

CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...