PT-2026-121150

Уязвимость пользовательского интерфейса WebUI браузеров Google Chrome и Microsoft Edge связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

PT-2026-114697

Уязвимость компонента Sensor веб-браузеров Google Chrome и Microsoft Edge связана с ошибками авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной HTML-страницы...

PT-2026-121214

Уязвимость интерфейса ServiceWorker браузеров Google Chrome и Microsoft Edge связана с ошибками авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность защищаемой информации с помощью специально созданной HTML-страницы...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the scxopsbypass function in the kernel/sched/ext.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel io_uring Heap Buffer Overflow DoS

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260327-73-0002

Vulnerability in busybox related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

ROS-20260327-73-0004

Vulnerability in gnupg2 related to incorrect cryptographic signature verification. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

Undertow environmental issues

Undertow is a web server provided by the Undertow company in the United States. Undertow has an environmental issue vulnerability, which stems from the ability of remote attackers to construct specially crafted requests that lead to header parsing discrepancies, potentially allowing for request...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...

firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the icemiscintr function in the drivers/net/ethernet/intel/ice/icemain.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux video buffer driver Heap Buffer Overflow DoS

The vulnerability of the ep93xxfbprobe function in the drivers/video/fbdev/ep93xx-fb.c driver for kernel-based graphics devices in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel CAN DoS

The vulnerability of the isotpbind function in the net/can/isotp.c module of the CAN subsystem of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Direct Rendering Infrastructure Kernel Heap Buffer Overflow DoS

The vulnerability of the functions rk3288lvdspoweron and px30lvdspoweron in the drivers/gpu/drm/rockchip/rockchiplvds.c driver of the Direct Rendering Infrastructure DRI subsystem of the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can...

btrfs_clear_buffer_dirty Heap Buffer Overflow DoS

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

Linux kernel Block Buffer Overflow DoS

The vulnerability of the blkunregisterqueue function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/sch_fq_pie.c Heap Buffer Overflow DoS

The vulnerability of the fqpiechange function in the net/sched/schfqpie.c module of the network/sched subsystem of the Linux operating system is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

msm_irq_postinstall Heap Buffer Overflow DoS

The vulnerability of the msmirqpostinstall function in the drivers/gpu/drm/msm/msmdrv.c file, a driver for supporting Direct Rendering Infrastructure DRI in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mellanox Ethernet network adapter Heap Buffer Overflow DoS

The vulnerability of the mlx5einitreptx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause...

intel_context_find-active_request Heap Buffer Overflow DoS

The vulnerability of the intelcontextfind-activerequest function in the drivers/gpu/drm/i915/gt/intelcontext.c module of the DRI support driver for the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...