PDFium Component DoS

The PDFium component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory management. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted PDF file...

WebSockets Component DoS

The WebSocket component vulnerability in Google Chrome and Microsoft Edge web browsers is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

MariaDB Name Reference Code Execution

The vulnerability of the MariaDB database management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Google Chrome Microsoft Edge DoS

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

libsvg Heap Buffer Overflow DoS

The vulnerability of the SVG vector graphics rendering library, librsvg, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

WebXR Interface Google Chrome Microsoft Edge

The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to reading beyond the permitted buffer boundaries of protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information or cause a denial-of-service conditio...

Google Chrome Microsoft Edge DoS

The vulnerability in Google’s Google Lens component for Google Chrome and Microsoft Edge stems from insufficient validation of user-supplied protected information. Exploitation of this vulnerability enables a remote attacker to trigger a denial-of-service condition by sending a specially crafted...

Google Chrome Microsoft Edge DoS

The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML pag...

Broadcast DVR User Service Privilege Escalation

The vulnerability of the Broadcast DVR User Service BcastDVRUserService for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

openFPGALoader Parser Function Unauthorized Access

The vulnerability of the POFParser::parseSection function in the openFPGALoader library lies in the reading of data beyond the allowed range during the parsing of a specially created .pof file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Linux rpc_rdma Component Failure

The vulnerability in the net/sunrpc/xprtrdma/rpcrdma.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux DMA AXI Dmac DoS

The vulnerability of the drivers/dma/dma-axi-dmac.c component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco FTD: CVE-2026-20011: Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed...

Cisco FTD: CVE-2026-20179: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation GRE Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is...

Cisco FTD: CVE-2026-20218: Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

PT-2026-120545

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0 on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra stream id for every additional stream. The response...

Blink Component DoS

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

PDFium Component DoS

The PDFium component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory management. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted PDF file...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmhyphandlefpsimd function in the arch/arm64/kvm/hyp/include/hyp/switch.h file of the Linux kernel is related to the implementation of incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...