1037738 matches found
CVE-2026-55554 Dompdf: Chroot Validation Bypass
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...
SUSE-SU-2026:3393-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. - CVE-2026-53366: ipv4: account for fraggap on the paged...
CVE-2026-54620
sqlite3-ruby (Ruby bindings for SQLite3) is affected by a Use-After-Free in aggregate function callbacks. From versions 2.1.0 through 2.9.4, callbacks for aggregate functions can be freed while still referenced during aggregation, causing an invalid memory read or a segmentation fault. The issue ...
Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn
This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. Patch Instructions: To install this SUSE update use the SUSE recommended...
CVE-2026-51260
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. CVE-2026-53366: ipv4: account for fraggap on the paged...
Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update
Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2026-13858
An out of bounds read flaw was found in the FFmpeg component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507090179...
CVE-2026-13883
A type confusion flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500030250...
CVE-2026-13869
An use after free flaw was found in the Device component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497610642...
CVE-2026-13790
A side-channel information leakage flaw was found in the Scroll component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=457771782...
CVE-2026-13814
An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511712766...
CVE-2026-13810
An inappropriate implementation flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504600482...
CVE-2026-13778
An use after free flaw was found in the WebUSB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513167952...
CVE-2026-13780
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514769383...
CVE-2026-13784
An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516962715...
CVE-2026-13788
An use after free flaw was found in the Fullscreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523119897...