CVE-2026-28687: Use After Free

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

Linux kernel IOMMU DoS

The vulnerability of the iommu/vt-d component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-28687 ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

CVE-2026-28687

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file. This vulnerabilit...

CVE-2026-3543

An inappropriate implementation flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=485267831...

CVE-2026-3542

An inappropriate implementation flaw was found in the WebAssembly component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=485152421...

CVE-2026-3536

An integer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=485622239...

CVE-2026-3540

An inappropriate implementation flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=484088917...

PT-2026-39013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Flaws exist in the DMA dequeue logic of the mipi-i3c-hci driver regarding the handling of RING CTRL ABORT. The driver issues ring aborts unconditionally even if the ring has stopped, fai...

PT-2026-33159

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description A use after free issue in the Video component on Windows allows a remote attacker who has compromised the renderer process to perform out of bounds memory access via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-3540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted...

PT-2026-39122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description DMA mapping error handling issues exist in the aml sfc dma buffer setup function. These include an unnecessary jump during the first DMA mapping failure, a double-unmap bug where sfc-dad...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

VMware Workstation Heap Buffer Overflow DoS

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE CVE-2026-3540

Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-3543

Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

Google Chrome < 145.0.7632.159 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 145.0.7632.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202603stable-channel-update-for-desktop advisory. - Insufficient data validation in Navigation in Google Chrome prior to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005791 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: wraparound mbox producer index Driver is not handling the wraparound of the mbox...

EUVD-2026-9484

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-9486

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...