162079 matches found
Astra Linux – Vulnerability in Chromium
The use of after free in Extensions in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Using “after free” in DevTools in Google Chrome before version 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox through a crafted Chrome Extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in V8 in Google Chrome before version 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox using a crafted Chrome Extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
In V8 in Google Chrome, prior to version 151.0.7922.72, it was possible for a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFs in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted PDF file. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The vulnerability allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page, using ANGLE in Google Chrome before version 152.0.7977.65. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in FedCM in Google Chrome before version 152.0.7977.65 allowed a remote attacker to leverage social engineering to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
CVE-2026-97185
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
DEBIAN-CVE-2026-97185
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
UBUNTU-CVE-2026-97185
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
How to hide vulnerability in WordPress
The developers of WordPress have uncovered a vulnerability within the software. A malicious individual could exploit this vulnerability using the identifier CVE-2026-87902, allowing them to load a local PHP file into the active theme files without authentication. Under certain conditions related ...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
EUVD-2026-85817
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
CVE-2026-97185
A flaw in the GIMPressionist plugin for GIMP allows an out-of-bounds write due to improper validation of vector indices when processing a specially crafted preset file . This memory corruption can lead to a program crash or arbitrary code execution if an attacker convinces a user to load a malici...
CVE-2026-97185
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
CVE-2026-97185 Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
CVE-2026-97185 Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...
CVE-2026-97185
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...