CVE-2026-95331

An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/500127519...

CVE-2026-95329

An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559320837...

CLEANSTART-2025-BC18774 arbitrary file write vulnerability was found in GNU gzip's zgrep utility

Security vulnerability affects the xz package. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility...

CVE-2026-103475

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

OPENSUSE-SU-2026:21983-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin bsc1261939....

SUSE-SU-2026:23973-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin bsc1261939....

SUSE-SU-2026:23984-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin bsc1261939....

CVE-2026-47565

A flaw was found in the NVIDIA GPU display driver. A privileged local user could trigger a race condition in the kernel mode layer, resulting in an out-of-bounds memory write. A successful exploit may allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS...

CVE-2026-47509

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an out-of-bounds write writing data past intended memory buffer limits within the kernel mode layer. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate...

CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges,...

CVE-2026-47596

A flaw was found in the NVIDIA GPU Display Driver for Linux. In the kernel mode layer, memory permissions are not properly preserved, allowing an unprivileged local user to write to read-only memory. This issue can lead to arbitrary code execution and privilege escalation on the affected system...

CVE-2026-47548

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an out-of-bounds write vulnerability within the kernel mode layer to corrupt system memory. Successful exploitation could allow an attacker to achieve arbitrary code execution with elevated kernel privileges, trigger a...

CVE-2026-47530

A flaw was found in nvidia-driver. A local user with standard privileges can trigger an out-of-bounds memory write within the driver's kernel-mode layer. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, tamper with sensitive data, or cause a denial o...

CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU vGPU Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine VM can exploit this vulnerability by sending a specially crafted Remote Procedure Call RPC request to the host system, causing an out-of-bounds memory write. A...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475

Versions of yii2-starter-kit through 4.2.0 are vulnerable because the default development configuration sets allowedIPs to ['*'], exposing the Yii debug and Gii modules to all IP addresses. Unauthenticated remote attackers can exploit this to access the debug endpoint to read sensitive data, such...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

EUVD-2026-90206

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Удалённое выполнение кода через кодек изображений Samsung ⚙️ Что это такое Критическая уязвимость в библиотеке обработки изображений Samsung libimagecodec.quram.so — используемой на устройствах Galaxy под управлением Android. 🧩 Это внеграничная запись out-of-bounds write ,...