5493 matches found
CVE-2026-92079
Mitigation bypass in the Widget: Win32 component. This vulnerability w...
CVE-2026-92064
Sandbox escape due to incorrect boundary conditions in the Widget: Win...
CVE-2026-92009
Privilege escalation due to incorrect boundary conditions in the Graph...
CVE-2026-90804
A vulnerability was detected in GNU Binutils 2.47. Affected by this is...
CVE-2026-90947
A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...
Astra Linux – Vulnerability in hdf5
A issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. This allows an attacker to cause a Denial of Service attack...
Astra Linux – Vulnerability in pyasn1
pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...
perl: Perl: Incorrect regular expression processing via large regular expressions
A flaw was found in Perl. When the Perl regular expression engine processes patterns with a very large number of alternative fixed strings, an internal data field can overflow. This leads to silently incorrect regular expression matches, causing the engine to either match strings it should not...
python-tornado security update
6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...
CVE-2026-90783
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...
CVE-2026-84367 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-6W3J-5FW6-R9VR vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-G6GW-C38X-MQFC vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard-fips, wazuh-dashboard, kibana...
CVE-2026-84364 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard-fips, wazuh-dashboard, kibana...
CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...
CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...
CVE-2026-89147
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...