CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

157560 matches found

Debian CVE•added 2026/06/08 11:27 p.m.•6 views

CVE-2026-11673

Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00234EPSS

Exploits0

Debian CVE•added 2026/06/08 11:27 p.m.•7 views

CVE-2026-11643

Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

8.1CVSS6AI score0.00261EPSS

Exploits0

Debian CVE•added 2026/06/08 11:27 p.m.•6 views

CVE-2026-11629

Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS5.5AI score0.00271EPSS

Exploits0

Snyk•added 2026/06/08 11:1 p.m.•5 views

Missing Release of Resource after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime in the nettyunixsocketrecvFd function. An attacker can cause file descriptor leaks by sending two file descriptors at once via a Unix domain socket, leading to resource exhaustion and...

5.1CVSS5.5AI score0.00193EPSS

Exploits0References2

OSV•added 2026/06/08 11:1 p.m.•6 views

GHSA-W573-9FFJ-6FF9 Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two ints has cmsglen = CMSGLEN8 = 24, which fits exactly with no MSGCTRUNC, so the kernel installs both fds in the receiving process. The subsequent che...

4CVSS5.5AI score0.00193EPSS

Exploits0References5

Github Security Blog•added 2026/06/08 11:1 p.m.•21 views

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

4CVSS5.5AI score0.00193EPSS

Exploits0References5Affected Software2

Debian CVE•added 2026/06/08 10:1 p.m.•4 views

CVE-2026-9669

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer...

8.2CVSS5.4AI score0.00375EPSS

Exploits0

Debian CVE•added 2026/06/08 7:59 p.m.•1 views

CVE-2026-40215

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion...

6.1CVSS5.5AI score0.00481EPSS

Exploits0