CVE-2025-13224 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MF9P-6469-JCWH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J6J9-M952-PP68 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9X82-VRJW-2M6C vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-7018 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-4559 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GG9C-7J6M-3QQ2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XWV3-34J2-7JGX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7C7G-86F2-3W2X vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-9963 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-7004 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-2883 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-29VG-WCMP-5FP9 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-9966 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3FJR-CX6C-863C vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-53350

In the Linux kernel, the following vulnerability has been resolved: ASoC: wmadsp: Fix NULL dereference when removing firmware controls In wmadspcontrolremove check that the priv pointer is not NULL before attempting to cleanup what it points to. When csdsp creates a control it calls...

UBUNTU-CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

CVE-2026-12374

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

EUVD-2026-41000

FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; many callers copy it into short fixed buffers without bounds checks, causing overflow. This maps to CWE-120 Buffer Copy...

CVE-2026-6685

CVE-2026-6685 refers to an Integer Underflow in FatFs during dirty-sector cache flush when handling fragmented volumes. Affected software is FatFs R0.16 and earlier; the issue arises from an unsigned-subtraction wrap in cache handling (fp->sect vs. sect) during interleaved read/write, which ca...