16943 matches found
Astra Linux – Vulnerability in RustC
In the standard library of Rust before version 1.51.0, the Zip implementation calls iteratorgetunchecked more than once for the same index when it’s nested. This bug can lead to a memory safety violation due to a failure to meet the safety requirements of the TrustedRandomAccess trait...
Astra Linux – Vulnerability in Firefox
A memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152 and Thunderbird 152...
Astra Linux – Vulnerability in Firefox and Thunderbird
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This...
Astra Linux – Vulnerability in Firefox, Thunderbird
Memory safety bugs exist in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox...
Astra Linux – Vulnerability in Firefox, Thunderbird
Memory safety bugs exist in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 120. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 121...
Astra Linux – Vulnerability in Thunderbird
Members of the Mozilla Fuzzing Team reported memory safety bugs in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. Thi...
Astra Linux – Vulnerability in Firefox
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 106. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execut...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed an UAF in l2capconnect Reported by Syzbot BUG: KASAN: Use of a slab object after a free call in l2capconnectconstprop.0+0x10d8/0x1270 net/bluetooth/l2capcore.c:3949 Read of size 8 at address...
Astra Linux – Vulnerability in RustC
In the standard library of Rust before version 1.2.0, BinaryHeap is not panic-safe. The binary heap becomes in an inconsistent state when the comparison of generic elements within siftup or siftdownrange causes a panic. This bug results in a decrease of zeroed memory of an arbitrary type, which c...
Astra Linux – Vulnerability in Firefox and Thunderbird
Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption, and we assume that with...
MiracleLinux 9 : thunderbird-140.13.0-1.el9_8.ML.1 (AXSA:2026-1625:19)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1625:19 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...
CVE-2026-74667 net/packet: reset the MAC header on the packet-socket transmit path
In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the MAC header only for a SOCKRAW frame whose socket did not bind a protocol. A protocol-bound SOCKRAW socket, any SOCKDGRAM frame, and...
Chromium: CVE-2026-76043 Incorrect calculation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MINI-8WGG-X7FP-W6PG
Bulletin has no description...
CVE-2026-61711 vulnerabilities
Vulnerabilities for packages: zot, podman, conftest, kubescape, skaffold, trivy, guac, scorecard, kaniko...
MINI-476C-8RP5-9R79
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root
Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:11. Multiple fixed versions available...
OESA-2026-3455 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfsattrleafhasname The calling convention of xfsattrleafhasname is problematic, because it returns a NULL buffer when xfsattr3leafread fails, a valid...
