CVE-2026-93752

CSSOM (versions through 0.5.0 ) contains a denial-of-service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. An attacker can supply a stylesheet containing a declaration named length , which replaces an internal counter and triggers excessive mem...

CVE-2026-53150

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...

AZL-90615 CVE-2026-53150 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...

CVE-2026-53150: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...

CVE-2009-2536: Undefined Security Weakness

Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2540: Allocation of Resources Without Limits or Throttling

Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service memory consumption via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-1692: Undefined Security Weakness

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service memory consumption or device reset via a web page containing an HTMLSelectElement object with a large...