5031 matches found
CVE-2026-89681
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORKSTRUCTPENDING before the callback is invoked, so delayedworkpending in lmbreakertimedout can return false while the fence worker is already running...
EUVD-2026-76325
In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...
CVE-2026-81002 xdp: fix zero-copy frame layout
In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...
PT-2026-90426
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A layout segment leak occurs in the NFSv4.1 implementation within the pnfs layout process function. When a server returns a new layout stateid while a valid one is still held, the system...
PT-2026-96477
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs layout process forget path When the server returns a new layout stateid while a valid one is still held, pnfs layout process calls pnfs mark matching lsegs return on the on-stack free ...
CVE-2026-89710: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...
ROS-20260911-73-0094
The vulnerability of the Layout component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
PT-2026-90397
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A race condition exists in the nfsd component where the workqueue core clears WORK STRUCT PENDING before the callback is invoked. This causes delayed work pending in the lm breaker timedout...
plone-app-layout (>=4.0.0a1, <=4.0.0a4) potentially affected by CVE-2026-55248 via plone-app-portlets (5.0.2)
plone-app-portlets PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on plone-app-portlets and may be impacted: - plone-app-layout =4.0.0a1, =4.0.0a4 Source cves: CVE-2026-55248 Source advisory: OSV:PYSEC-2026-3884...
SUSE CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
CVE-2026-87566
An observable discrepancy flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540021850...
DEBIAN-CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74422
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87566
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87566
Google Chrome (prior to version 153.0.8010.36 ) is vulnerable to an observable discrepancy in Layout (CWE-203). A remote attacker can exploit this flaw by using a crafted HTML page to leak sensitive information. This vulnerability affects Chromium-based browsers, including Microsoft Edge and vers...
