90427 matches found
CVE-2026-61387
CVE-2026-61387 (Eclipse Milo) affects Milo 1.0.0–1.1.4. The issue is that monitored-item quota accounting is not exception-safe: if item creation fails due to an unchecked error, the server-global reservation is not restored. Additionally, deeply nested PubSub ExtensionObjects in a CreateMonitore...
CVE-2026-61387
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...
crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...
Security Bulletin:QS.stringify TypeError with arrayFormat: comma and encodeValuesOnly:true on null/undefined Arrays
Summary Summary qs.stringify throws TypeError when called with arrayFormat: 'comma' and encodeValuesOnly: true on an array containing null or undefined. The throw is synchronous and not handled by any of qs's null-related options skipNulls, strictNullHandling. Details In the comma +...
AZL-94508 CVE-2026-18739 affecting package popt 1.19-2
A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...
CVE-2026-18739
A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...
CVE-2026-66401
A flaw was found in FreeRDP. This out-of-bounds read vulnerability in the Universal Video Class UVC H.264 extension-unit parser occurs because the software fails to validate descriptor length before accessing the GUID field. A local attacker, by connecting a specially crafted malicious USB video...
EUVD-2026-52533
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52525
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66318
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-66317
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
CVE-2026-66322
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66313
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
Exploit for Use of Uninitialized Variable in Google Chrome
--- CVE-2026-11110 – AES-GCM Nonce Reuse Leading to Key Reco...
CVE-2026-47622: Generation of Error Message Containing Sensitive Information
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-66322: Origin Validation Error
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66316: Origin Validation Error
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66313: Origin Validation Error
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
Amazon Linux 2023 : openvpn, openvpn-devel (ALAS2023-2026-2038)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2038 advisory. OpenVPN memory-leak in tls-crypt-v2 client key handling that could lead to out-of-memory situations and subsequent server crashes CVE-2026-12932 When dynamic tls-crypt is active, it is possibl...