156532 matches found
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, resulting in an unexpected process crash...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management...
CVE-2026-102128 Kiteworks Email Protection Gateway Improper Authentication
An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...
CVE-2026-102128 Kiteworks Email Protection Gateway Improper Authentication
An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...
CVE-2026-102128
The Kiteworks Email Protection Gateway contains an identity-verification weakness that allows the gateway to act on the Kiteworks platform on behalf of unauthenticated users. An attacker can exploit this to provision a platform account for an unknown identity, potentially leading to the unauthori...
CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...
CVE-2026-102132
A vulnerability in Kiteworks Core allows for privilege escalation due to improper access control within an administrative import function. The system fails to verify if a requesting administrator is authorized to create the specific privileged integration credential being imported. Consequently, ...
CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...
CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control
Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...
CVE-2026-102149
The Kiteworks Email Protection Gateway is vulnerable to an improper access control issue because it fails to sufficiently restrict which account a certificate can be assigned to. An attacker could exploit this to associate a certificate with another user's account, compromising the confidentialit...
CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control
Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...
EUVD-2026-90375
Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...
CVE-2026-102093
Kiteworks Core versions prior to 9.5.0 are vulnerable to Improper Privilege Management due to a failure in enforcing restrictions on role assignment. This flaw allows an authenticated administrative user with limited, non-Sysadmin role-management permissions to bypass authorization limits and ele...
CVE-2026-102093 Kiteworks Core improper privilege management
Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...
CLEANSTART-2025-ZG19712 Improper input validation in the Kubernetes API server in versions v1
Security vulnerability affects the containerd package. Improper input validation in the Kubernetes API server in versions v1...
CLEANSTART-2024-OS27994 improper limitation of path name flaw was found in containernetworking/cni in versions before 0
Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0...
