kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

SUSE CVE-2026-63838

In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of componentdais componentdaisRSNDMAXCOMPONENT is initially zero-initialized and later populated in rsnddaiofnode. However, the existing boundary check: if i = RSNDMAXCOMPONENT does...

Google Chrome buffer overflow vulnerability (CNVD-2026-30666)

Google Chrome is a web browser developed by Google, offering fast and secure browsing experiences. Google Chrome has a security vulnerability that stems from the Codecs component’s failure to properly handle boundary conditions. Attackers can exploit this vulnerability to achieve sandbox escape...

ROS-20260724-73-0038

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260724-73-0043

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30668)

Google Chrome is a web browser developed by Google, primarily offering fast and secure web browsing features. Google Chrome has a resource management vulnerability, which stems from improper handling of object lifecycles in the Blink component. Attackers can exploit this vulnerability to execute...

ROS-20260724-73-0016

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Rockwell Automation Arena < 17.00.01 Multiple Vulnerabilities (SD1784)

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 17.00.01. It is, therefore, affected by multiple vulnerabilities: - A memory corruption vulnerability exists in the model.exe Siman component due to improper validation of user-supplied data, which can resul...

Microsoft Edge (Chromium) < 149.0.4022.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.69. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a...

ROS-20260724-73-0042

The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-16375

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: HTTP component...

CVE-2026-16387

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component...

CVE-2026-16391

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

CVE-2026-16371

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

CVE-2026-16374

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

CVE-2026-16359

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

CVE-2026-16362

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

CVE-2026-16350

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...

CVE-2026-16351

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

CVE-2026-16357

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...