750860 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.46 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.
Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...
Vulnerability handling in Google Chrome
Google has discovered a vulnerability in the V8 JavaScript engine of Google Chrome. Google reports that this vulnerability is actively exploited with the identifier CVE-2026-87491. It involves an out-of-bounds write operation in the V8 engine of Google Chrome, which occurs in versions prior to...
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence AI companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring a...
CVE-2026-56855
A flaw was found in golang.org/x/crypto/ssh. After a channel has been established, a remote malicious peer could send specially crafted messages. This could lead to a deadlock of the entire connection, resulting in a Denial of Service DoS for the affected system. Mitigation Red Hat is not aware o...
CVE-2026-31911
A flaw was found in libpcap. A local attacker could provide a crafted filter program containing an invalid Berkeley Packet Filter BPF opcode. This could cause the operating system OS process using libpcap to terminate, leading to a Denial of Service DoS...
CVE-2026-18313
A flaw was found in libpcap, specifically within the rpcapd daemon. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ messages. The rpcapd daemon allocates memory for these messages but fails to...
CVE-2026-18238
A flaw was found in libpcap. The rpcap client code, which processes RPCAPMSGPACKET messages from a server, incorrectly validates its headers. A malicious server could exploit this vulnerability by sending a specially crafted message, causing the client to read up to 20 bytes of memory beyond its...
CVE-2026-6244
A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter's 'div k' and 'mod k' instructions do not validate if the immediate value 'k' is zero. A local attacker with low privileges could exploit this by providing a specially crafted filter program, leading to a division-by-zero...
CVE-2026-6554
A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter incorrectly handles offsets in 'ja L' instructions, allowing backward jumps without limiting loop iterations. A local attacker could provide a specially crafted filter program, leading to an infinite loop and causing a Denial...
CVE-2026-79973
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google on Tuesday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 CVSS score: N/A, has been described as an out-of-bounds bug in V8, Chrome's...
A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
Summary A malformed HTTP message using Transfer-Encoding: chunked can drive React\Http\Io\ChunkedDecoder into an infinite loop, pegging a CPU core and freezing the event loop. Because ReactPHP is single-threaded, one such message stalls the entire process for every client until it is killed. Both...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
BIT-KIBANA-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
BIT-ELK-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
