ROS-20260313-73-0005

A vulnerability in the pnfsupdatelayout function of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component...

Kerberos Windows Bypass

The vulnerability of the Kerberos protocol for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Bluetooth RFCOM Protocol Driver Privilege Escalation

The vulnerability of the Bluetooth RFCOM Protocol Driver for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Linux DRM Scheduler DoS

The vulnerability of the drmschedentitykilljobscb function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Backstage input validation error vulnerability

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 0.27.1 contained a vulnerability related to input validation errors. This vulnerability stemmed from an experimental OIDC provisioning...

Shopware has user enumeration via distinct error codes on Store API login endpoint

Summary The Store API login endpoint POST /store-api/account/login returns different error codes depending on whether the submitted email address belongs to a registered customer CHECKOUTCUSTOMERAUTHBADCREDENTIALS or is unknown CHECKOUTCUSTOMERNOTFOUND. The "not found" response also echoes the...

SUSE CVE-2025-14435

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

CVE-2026-30235

OpenProject is an open-source, web-based project management software. Prior to 17.2.0, this vulnerability occurs due to improper validation of OpenProject’s Markdown rendering, specifically in the hyperlink handling. This allows an attacker to inject malicious hyperlink payloads that perform DOM...

virtio-net DoS

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the kcmrelease function in the net/kcm/kcmsock.c module, which implements networking functions for the Linux operating system’s kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service...

Linux kernel __do_sys_open_tree_attr Heap Buffer Overflow DoS

The vulnerability of the dosysopentreeattr function in the fs/namespace.c file of the Linux kernel file system is related to initialization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Adaptive Substance 3D Painter Pointer Error DoS

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel cfg80211_check_and_end_cac DoS

The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:0851-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0851-1 advisory. - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression bsc1258743. - CVE-2026-24484:...

Adaptive Substance 3D Painter Pointer Error DoS

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-34798

Уязвимость подсистемы теневого копирования средства защиты информации Secret Net Studio связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю осуществить модификацию защищаемых данных...

ROS-20260310-73-0022

Vulnerability in python-filelock related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

i40e Component Confidential Data Compromise

The vulnerability of the i40e component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Shadow copying subsystem Modification

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to modify the protected data...