13584 matches found
CVE-2026-109618
PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...
PT-2026-129112
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/ imaging.c checks positive glyph advances against INT MAX but does not check negative advances against INT MIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow...
Google Chrome Microsoft Edge DoS
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
WebUI User Interface
The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to authorization flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Google Chrome ServiceWorker Data Compromise
The vulnerability in the ServiceWorker interface of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792603232)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792603232 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...
Google Chrome Edge Data Compromise
The Core component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
CVE-2026-109618 PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup...
VulnCheck KEV: CVE-2026-109618
PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution...
CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792599322)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792599322 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...
PHP < 8.2.35 / 8.3.x < 8.3.36 / 8.4.x < 8.4.27 / 8.5.x < 8.5.12 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.2.35, 8.3.x prior to 8.3.36, 8.4.x prior to 8.4.27, or 8.5.x prior to 8.5.12. It is, therefore, affected by multiple remote code execution vulnerabilities as referenced in the 21 October 2026 PHP security advisory. - PHP uses longjmp f...
CentOS Linux 8.5 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792598317)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792598317 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
WebUI DoS
The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Google Chrome Microsoft Edge Access Information
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...
Rocky Linux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792602059)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792602059 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may n...
AlmaLinux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792602059)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792602059 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not...
InterestGroups Component Compromise Protected Information
The vulnerability in the InterestGroups component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted PDF file...
