CVE-2026-101934

An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service DoS via sending a crafted packet to the eventd relay service...

EUVD-2026-101357

A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via crafted packets when the static MAC-IP feature is in use...

CVE-2026-102032 Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present

A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via crafted packets when the static MAC-IP feature is in use...

EUVD-2026-101487

An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service DoS via sending a crafted packet to the eventd relay service...

CVE-2026-110735

The Godot Engine (through version 4.7.2 ) is vulnerable to a heap out-of-bounds write in the binary resource loader, specifically within core/io/resource_format_binary.cpp at ResourceLoaderBinary::get_unicode_string. The root cause is a signed to unsigned conversion error (CWE-195) where a string...

CVE-2026-110259

OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded...

CVE-2016-20099

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1importerprobe in importer/vc1imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmashreadfile probes automatically, causing indefinite CPU...

CVE-2026-110262 OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter

OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in...

Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot

Overview Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. Use of Weak Credentials CWE-1391 - CVE-2026-107153 Masayoshi Matsubara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

pcre2 security update

An update is available for pcre2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcre2 package contains a new generation of the Perl Compatible Regular...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-110444

TeamPlus Messenger , developed by Teamplus Technology, contains a Code Injection vulnerability (CWE-94). Unauthenticated remote attackers can exploit this by tricking users into opening a crafted link , which allows for the injection and execution of arbitrary JavaScript . If the user interacts w...

CVE-2026-110444 TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CLEANSTART-2026-AW54211 crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo

Security vulnerability affects the libjpeg-turbo package. A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

EUVD-2026-100633

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100636

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100653

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-110262: Allocation of Resources Without Limits or Throttling

OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in...

Linux Distros Unpatched Vulnerability : CVE-2026-110146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information vi...