ROS-20260915-73-0177

The vulnerability of the XR web browsers Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0086

The vulnerability of the libyuv component in Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260911-73-0115

The vulnerability of Chromecast web browsers Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0137

The vulnerability of DevTools components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Skia Graphic Library Confidential Data Access

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Password Manager Component Firefox Confidential Data Access

The vulnerability of the Password Manager component in the Firefox web browser is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

EUVD-2026-53835

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials...

Sensitive Information Exposure

Next.js is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper caching of server-side fetch responses for non-UTF-8 request bodies, where different request bodies can share the same cache entry, allowing confidential response data to be exposed to unauthorized...

ROS-20260702-73-0007

The vulnerability of the fslmcdeviceremoveifnotinmc function in the drivers/bus/fsl-mc/dprc-driver.c file, which is part of the fslmc kernel driver for Linux operating systems, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service...

Dell PowerFlex Manager URL Redirection Phishing

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack lies in the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker to carry out phishin...

K000161987: Golang vulnerability CVE-2025-47907

Security Advisory Description Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability caused by insufficient authorization within the API. This flaw could allow an authenticated attacker to retrieve confidential information that exceeds their assigned privileges. No specific details regarding affected versions, ...

Linux kernel CAN Buffer Overflow DoS

The vulnerability of the mcanreadfifo function in the drivers/net/can/mcan/mcan.c file of the Linux kernel’s CAN device support driver exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

InfiniBand driver Heap Buffer Overflow DoS

The vulnerability of the readreply function in the drivers/infiniband/sw/rxe/rxeresp.c file of the InfiniBand driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Linux kernel IOMMU Heap Buffer Overflow DoS

The vulnerability of the mtkiommuremove function in the drivers/iommu/mtkiommu.c module of the Linux kernel’s IOMMU support driver exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers/pci/iov.c Heap Buffer Overflow DoS

The vulnerability of the drivers/pci/iov.c component in the Linux operating system is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel dst_count_dec Heap Buffer Overflow DoS

The vulnerability of the dstcountdec function in the net/core/dst.c module, part of the Linux kernel’s networking functions support, involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...