dt2815.c Heap Buffer Overflow DoS

The vulnerability in the dt2815attach function within the drivers/comedi/drivers/dt2815.c module, which supports data collection devices for the Linux kernel, is related to synchronization errors occurring when a shared resource is utilized. Exploitation of this vulnerability may enable a remote...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel USB gadget driver DoS

The vulnerability in the getherdisconnect function within drivers/usb/gadget/function/uether.c of the Linux kernel USB gadget driver is related to synchronization errors when using a shared resource “race condition”. Exploitation of this vulnerability may allow an attacker to cause a denial of...

Mellanox Ethernet Network Adapter Heap Buffer Overflow

The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098688 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipherwalk functions can allocate memory and c...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104610 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

UBUNTU-CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Apache Tomcat is vulnerable to an off-by-one error impacting the [N] flag on rewrite valves . This flaw causes rewrite processing to restart at the second rule rather than the first rule, which may lead to access control bypass . Affected versions include 11.0.0-M1 through 11.0.24, 10.1.0-M1 thro...

CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

EUVD-2026-66071

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79148

An off-by-one error in DevTools within Google Chrome (prior to version 152.0.7977.65) allows a remote attacker to use social engineering to trick a user into installing a malicious Chrome extension. This exploit could enable the attacker to read sensitive memory inside the browser's sandbox, lead...

GO-2026-6288 MCP Toolbox for Databases has an Origin Validation Error in github.com/googleapis/genai-toolbox

MCP Toolbox for Databases has an Origin Validation Error in github.com/googleapis/genai-toolbox...

GHSA-XQQH-3W52-Q8P7 Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wx95-c6cv-8532. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method,...