5641 matches found
CVE-2026-54467
On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...
[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43
Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...
CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2
CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...
CVE-2026-76641 affecting package expat for versions less than 2.8.3-2
CVE-2026-76641 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...
CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1
CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1. A patched version of the package is available...
CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2
CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...
CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3
CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3. A patched version of the package is available...
CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30
CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79065
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79267
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79255
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78986
Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-79031
Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...
CVE-2026-79770
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...
CVE-2026-15310
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...
CVE-2026-16599
GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...