5952 matches found
CVE-2026-11669
An integer overflow flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515429352...
CVE-2026-11663
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513820666...
CVE-2026-11659
An insufficient validation of untrusted input flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513702971...
CVE-2026-11655
An integer overflow flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513396305...
CVE-2026-11650
An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511279942...
CVE-2026-11642
An use after free flaw was found in the Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517678820...
CVE-2026-11640
An integer overflow flaw was found in the libyuv component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517339758...
CVE-2026-11639
An use after free flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517227707...
CVE-2026-11637
An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517040438...
CVE-2026-11632
An use after free flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516707881...
CVE-2026-11629
An use after free flaw was found in the Ozone component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516674532...
keycloak: Cross-Session Email Verification Proof Not Bound to Upstream Identity in First-Broker-Login
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
MGASA-2026-0187 Updated tor packages fix security issues
This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...
Updated tor packages fix security issues
This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...
PT-2026-48568
Name of the Vulnerable Software and Affected Versions Dulwich affected versions not specified Description A path traversal flaw exists in the Dulwich Python library for Git repositories due to incorrect restriction of directory path names. This issue allows a remote attacker to bypass standard...
PT-2026-51134
This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...
Exploit for CVE-2026-46394
CVE-2026-46394 - HAXcms Git.php OS Command Injection CWE-78...
User Impersonation
Overview org.springframework.security:spring-security-web is a package within Spring Security that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to User Impersonation via username extraction in SubjectDnX509PrincipalExtractor. An attacker...
