ROS-20260915-73-0111

The vulnerability of the LiveCaption component in Google Chrome and Microsoft Edge browsers is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20260915-73-0187

The vulnerability of the SplitView component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service interruptions through the us...

CVE-2026-7208

Yealink SIP-T33G IP phones running firmware 124.86.x.x (prior to 124.87.0.0 ) are affected by a race condition in the runtime diagnostic subsystem. An authenticated attacker can trigger a diagnostic operation such as traceroute or ping and concurrently invoke the file-deletion endpoint to remove ...

EUVD-2026-77476

Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files written to predictable paths under the diagnostic directory. Attackers can...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue in the handling of concurrent media has been addressed through improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: nbd: The issue of task hanging when the signal interrupt nbdstartdeviceioctl occurs has been fixed. The following program is a simplified version of the reproducer function: c int mainvoid int sv2, fd; if socketpairAFUNIX,...

The vulnerability of the module of the SAP Business Warehouse data management and analytics system allows a hacker to trigger a service failure.

The vulnerability of the module of the SAP Business Warehouse data management and analytics system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of Cisco IOS XR operating systems, related to the implementation of incorrect control flow, allows attackers to trigger service interruptions.

The vulnerability of Cisco IOS XR operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ROS-20260914-73-0041

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20260914-73-0037

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

UBUNTU-CVE-2026-89600

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer to range.pos in the heap-allocated permission event so...

CVE-2026-89600 fanotify: fix use-after-free of file range info

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer to range.pos in the heap-allocated permission event so...

The vulnerability of the gf_hevc_read_sps_bs_internal() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260911-73-0189

The vulnerability in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

ROS-20260910-73-0105

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions throug...

ROS-20260910-73-0044

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ROS-20260910-73-0146

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use of a...

ROS-20260910-73-0037

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the u...

ROS-20260910-73-0158

The vulnerability of the Media UI component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use...

CVE-2026-41869

Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. If an upgrade is not possible, use...