DEBIAN-CVE-2026-79239

Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79188

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-80101

A flaw in GIMP's file-xwd plugin causes a heap out-of-bounds read when processing a specially crafted XWD image file. The root cause is that the plugin validates the image width and bytes-per-line parameters independently, rather than ensuring their combined values are consistent with the allocat...

CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79189

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-68515 OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied,...

CVE-2024-5274

CVE-2024-5274 Autoren: @mistymntncop, @buptsb Ein großes Dankeschön an @buptsb für seinen wesentlichen Beitrag: die Entdeckung sowohl des DCHECK-Bytecode-Fehlers POC als auch die Erkenntnis, wie man diese Primitive zu leistungsfähigeren OOB-Lese-/Schreibprimitiven aufwerten kann. Ohne ihn wäre...

CVE-2026-59184 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-59184 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Suite di Rilevamento Hypervisor per Honor Magic V2 ➲ Panoramica del Progetto SENTINEL-ROOT-AUDIT è una suite di sicurezza di livello professionale progettata per verificare l'integrità del kernel e rilevare interventi a livello hypervisor su Honor Magic V2 SM8550. Mentre la...

Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization

Sitecore Experience Manager XM and Experience Platform XP 10.4 before KB1002844 allow remote code execution through insecure deserialization. id: CVE-2025-27218 info: name: Sitecore Experience Manager XM/Experience Platform XP 10.4 - Insecure Deserialization author: iamnoooob,rootxharsh,pdresearc...

CVE-2026-68516

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...

CVE-2026-73066

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

SUSE-SU-2026:3740-1 Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2026-74683

A flaw was found in the Linux kernel's evdev component. A local user could provide a specially crafted event type index to the EVIOCGMASK or EVIOCSMASK ioctls. This could lead to speculative execution mispredicting bounds checks and performing out-of-bounds loads, potentially resulting in...

CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

EUVD-2026-64381

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

CVE-2026-74694 net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

CVE-2026-74694

CVE-2026-74694 is a heap out-of-bounds read in the Linux kernel's net/ncsi subsystem. The function ncsi_send_cmd_nl() trusts the attacker-controlled ncsi_pkt_hdr.length field from the in-band packet header without cross-checking it against the actual readable size of the NCSI_ATTR_DATA netlink at...

CVE-2026-74694 net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...