159442 matches found
ROS-20260722-73-0019
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...
ROS-20260722-73-0017
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...
PT-2026-63441
Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.4 through 8.1.2 Description A double-free issue exists in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c. An attacker can trigger memory corruption by providing a specially crafted video file. This occurs when no...
PT-2026-63342
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets...
EUVD-2025-210503
An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...
PT-2026-63477
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
RHEL 10 : libinput (RHSA-2026:43290)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43290 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...
CVE-2025-44090
CVE-2025-44090 affects OhSoft CoffeeZip v4.8.0.0. A crafted archive file, downloaded and executed by a user, allows arbitrary code execution. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction is required. Impacts on confidentiality, int...
PT-2026-63435
Name of the Vulnerable Software and Affected Versions FFmpeg versions 8.0 through 8.1.2 Description A stack buffer overflow exists in the Vulkan HEVC hardware decoder. A remote attacker can overwrite return addresses and adjacent stack frames by providing a specially crafted HEVC/H.265 bitstream...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code within the browser’s sandbox.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the browser’s sandbox through the created...
ROS-20260722-73-0012
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...
ROS-20260722-73-0009
The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the unci tile decoding process. An attacker can achieve arbitrary code execution by supplying a specially crafted HEIF file that triggers a heap out-of-bounds write, allowing the overwrite of a C++ vtable pointer...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the Track::initsampletimingtable process. An attacker can trigger a heap buffer overflow by providing a crafted file where the number of chunks defined in the stco box is less than the number of samples in stsz,...
Allocation of Resources Without Limits or Throttling
Overview io.netty:netty-codec-http2 is a HTTP2 sub package for the netty library, an event-driven asynchronous network application framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the Http2Decompressor.decompress. An attacker c...
CVE-2026-63982
A flaw was found in the Linux kernel's network scheduler component. This vulnerability occurs when the mirred action, used for redirecting network traffic, fails to properly detect a redirection loop. An attacker can exploit this by crafting specific network configurations that cause packets to b...
CVE-2026-16424
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-16424
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...