SealSecurityAssignment

SealSecurityAssignment Researching on the vulnrability CVE-2023-26136 Research on Vulnerability: CVE-2023-26136 Description: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=fal...

Chromium: CVE-2026-78940 Improper initialization in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe Che cos'è? Divulgata il 7 marzo 2022 da Max Kellerman2, la CVE-2022-0847 è una vulnerabilità nel kernel Linux versioni tra la 5.8 e la 5.16.11 che consente agli attaccanti di sostituire file di sola lettura o immutabili e aumentare i propri privilegi sul sistema...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.797...

CVE-2026-78940

A flaw was found in Google Chrome's Network component. Improper initialization in this component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-78940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

DEBIAN-CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in the Network component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass the web origin policy by enticing a user to visit a crafted HTML page. According to Red Hat, this can lead to unauthorized access to sensitive information or actions across ...

The vulnerability of the functions system_call() and mckk_int_handler() in the arch/s390/kernel/entry.S module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the functions systemcall and mcckinthandler in the arch/s390/kernel/entry.S module of the Linux operating system’s kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-81552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper initialization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

CVE-2026-74472

A flaw was found in the Linux kernel's ublk driver. This vulnerability arises from improper initialization of kernel-owned device information fields when a new ublk device is added. A local attacker could exploit this by providing malformed device information, which may lead to a kernel panic,...

CVE-2026-74265

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...

CVE-2026-20734

Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...

EUVD-2026-56480

Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...

CVE-2026-20734

The CVE-2026-20734 entry concerns firmware in Intel AMT and Intel Standard Manageability. The root cause is improper initialization in certain firmware, leading to an information disclosure. A local attacker with privileged user status and a low attack complexity could trigger data exposure witho...

PT-2026-70286

Name of the Vulnerable Software and Affected Versions IntelR Active Management Technology IntelR AMT affected versions not specified IntelR Standard Manageability affected versions not specified Description Improper initialization in the firmware may allow an information disclosure. A system...

The vulnerability of the scsi_host_busy() function in the drivers/scsi/hosts.c module of the Linux operating system’s SCSI device driver allows a attacker to cause a service failure.

The vulnerability of the scsihostbusy function in the drivers/scsi/hosts.c module of the Linux SCSI device driver framework is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...