276466 matches found
WebUI DoS
The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Google Chrome Microsoft Edge Permissions Bypass
The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...
Linux rpc_rdma Component Failure
The vulnerability in the net/sunrpc/xprtrdma/rpcrdma.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux arch/arm64/include/asm/exception.h Data Compromise
The vulnerability of the arch/arm64/include/asm/exception.h component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...
Linux kernel Architecture Data Compromise
The vulnerability in the components arch/mips/bmips/setup.c and arch/mips/bmips/dma.c of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
Google Chrome Microsoft Edge Data Compromise
The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
Linux run_get_highest_vcn() Data Compromise
The vulnerability of the rungethighestvcn function in the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Google Chrome ServiceWorker Data Compromise
The vulnerability in the ServiceWorker interface of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
Linux kernel Control Flow
The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux CIFS misc Component Data Compromise
The vulnerability of the fs/cifs/misc.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Google Chrome Microsoft Edge DoS
The vulnerability in the Linux Toolkit Theming component of Google Chrome and Microsoft Edge web browsers is related to improper access control. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome Edge Data Compromise
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information...
Google Chrome Microsoft Edge Access Information
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to gain access to protected information...
ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
This module enables you to generate and serve WebP derivatives of image style images, overriding Drupal core's image style download controller to serve them. The module serves WebP image derivative responses with the HTTP header Cache-Control: public for all file schemes other than the private fi...
Exploit for Insufficient Granularity of Access Control in Microsoft
NEFENDER This framework has been RE-WEA...
net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server
A flaw was found in Go's HTTP/2 server implementation. A remote attacker can bypass connection-level flow control limits—mechanisms that regulate incoming network data—potentially causing excessive memory consumption and a Denial of Service DoS. This issue occurs because the server improperly...
CVE-2026-93744
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
CVE-2026-91467
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful...
DEBIAN-CVE-2026-113297
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...