CVE-2026-54467: Unverified Ownership

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65892

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78940

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-53584

A flaw was found in libgit2. This vulnerability allows a remote attacker to create directories outside of the intended repository working tree. By crafting a malicious repository that specifies traversal components in a submodule path, applications initializing the submodule can be tricked into...

Insecure Default Initialization Of Resource

org.openidentityplatform.openam, openam-core is vulnerable to Insecure Default Initialization of Resource. The vulnerability is due to the default configuration setting the iPlanetDirectoryPro SSO cookie with HttpOnly=false while also using the cookie as a CSRF token in OAuth/OIDC flows, which...

SUSE CVE-2026-74405

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between devpmoppadddynamic and devpmoppfindfreqexact: CPU0 add CPU1 lookup ------------------------------- ------------------------------ oppadd mutexlock...

ROS-20260825-73-0039

The vulnerability of the evlistfreesyscalltpfields function in the tools/perf/builtin-trace.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-78940: Improper Initialization

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the functions system_call() and mckk_int_handler() in the arch/s390/kernel/entry.S module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the functions systemcall and mcckinthandler in the arch/s390/kernel/entry.S module of the Linux operating system’s kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rxrpc_process_event() function in the net/rxrpc/conn_event.c module allows for a session-based RxRPC kernel support on Linux systems, enabling a hacker to cause a service failure.

The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support for Linux kernel, relates to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ppp_send_frame() function in the drivers/net/ppp/ppp_generic.c module of the Point-to-Point PPP protocol driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the pppsendframe function in the drivers/net/ppp/pppgeneric.c module of the Point-to-Point PPP protocol driver in the Linux operating system is related to the lack of resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions nv50_piorDestroy() and nv50_piorCreate() in the driver/gpu/drm/nouveau/dispnv50/disp.c file of the Nouveau driver for the Direct Rendering Infrastructure (DRI) of NVIDIA’s Linux kernel allow a malicious actor to cause a service failure.

The vulnerability of the functions nv50piordestroy and nv50piorcreate in the drivers/gpu/drm/nouveau/dispnv50/disp.c module of the Nouveau graphics driver for Linux operating systems is related to the lack of resource initialization. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the ESS protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...