Linux Distros Unpatched Vulnerability : CVE-2026-106284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and...

DEBIAN-CVE-2026-106424

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-106395

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an out-of-bounds read in the Printing component. A remote attacker who has already compromised the renderer process and leveraged social engineering can use a crafted HTML page to read memory outside the sandbox. This vulne...

CVE-2026-106290

A vulnerability exists in the GPU component of the Chromium browser , specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 . The root cause is an uninitialized resource flaw, which could allow a remote attacker who has already compromised the renderer process to read me...

CVE-2026-102313

A flaw was found in chromium-browser. An uninitialized resource in the ANGLE Almost Native Graphics Layer Engine component leads to information disclosure. A remote attacker can exploit this vulnerability by convincing a user to open a crafted HTML page, enabling the attacker to read memory outsi...

DEBIAN-CVE-2026-95332

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79206

Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

Qualcomm Heap Buffer Overflow

The vulnerability of microprogramming software in embedded Qualcomm chips relates to reading memory data outside the buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate data...

PT-2026-57314

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but befo...

ImageMagick MAP Decoder Unauthenticated Access DoS

The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick relates to reading values that fall outside the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...

UTT HiPER 810G Router strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/NTP in the UTT HiPER 810G router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-6040: Use After Free

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed...

Palo Alto Networks GlobalProtect App Buffer Overflow Code Execution

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack an...

EUVD-2024-19556

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability...

CVE-2021-26380

A compromised Trusted OS TOS driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity...

PT-2026-31690

Name of the Vulnerable Software and Affected Versions Wasmtime versions 25.0.0 through 36.0.6, 42.0.2, and 43.0.1 Description Wasmtime, a runtime for WebAssembly, may allow guest WebAssembly code to access host memory outside of its designated sandbox when using the Winch compiler backend. This...

CVE-2026-4371

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were...