174548 matches found
CVE-2026-93382
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-93374
A use after free vulnerability exists in Dawn within the Google Chrome browser on Android (prior to version 153.0.8010.52 ). A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. This issue has been addressed in the 153.0.8010...
vim: Vim: Arbitrary Code Execution via crafted directory names
A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...
DEBIAN-CVE-2026-90133
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...
CVE-2026-90133
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...
DEBIAN-CVE-2026-90058
In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdiscpktlen to prevent qdisc soft lockup qdiscgetstab accepts a user-supplied size table, and qdisccalculatepktlen amplifies qdiscpktlen through the overhead, the size-table data u16, and sizelog up to...
CVE-2026-90133 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...
EUVD-2026-81726
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...
CVE-2026-90133
CVE-2026-90133 is a heap out-of-bounds write in the Linux kernel's NTFS filesystem driver , specifically in the ntfs_ir_to_ib() function. The function copies entries from an index_root structure into a fixed-size buffer (index_block_size bytes) via memcpy without verifying that the entries fit wi...
SUSE-SU-2026:4249-1 Security update for netcdf
This update for netcdf fixes the following issue: - CVE-2026-86095: out-of-bounds write in NC4HDF5inqattname due to missing length validation when processing a crafted HDF5 file bsc1279882...
CVE-2026-92627
A flaw was found in HDF5. A heap-use-after-free vulnerability exists when converting a compound datatype containing floating-point members during a dataset read. An attacker can supply a specially crafted HDF5 file, which, when parsed by an application, can trigger this flaw. This can lead to a...
RLSA-2026:67830 Important: tesseract security update
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...
tesseract security update
An update is available for tesseract. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 an...
RLSA-2026:67832 Important: tesseract security update
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...
BIT-MONGODB-2026-82066 Heap Out-of-Bounds Read in MongoDB Server Query Planning Component
A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...
Security update for libpcap
This update for libpcap fixes the following issues: CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k' AL...
CVE-2026-91722
An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554953456...
CVE-2026-91721
An use after free flaw was found in the Internals component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=557320614...
CVE-2026-91014
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...
RLSA-2026:67831 Important: tesseract security update
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...