198624 matches found
PT-2026-106731
🚨 CVE-2026-77178 CVSS 8.8 High An out-of-bounds write in Oracle VM VirtualBox's PCNet device model enables guest OS attackers to corrupt host memory and escape virtualization. https://t.co/GhdNlEPmY2 https://t.co/Fs6WHY8fRj...
PT-2026-106515
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex search oui in ie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs,...
PT-2026-106517
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate curve data length in the calibration curve converters p54 convert rev0 and p54 convert rev1 read calibration curve data from the device-supplied EEPROM entry using channel and points-per-channel counts taken...
PT-2026-106496
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-total read for compound encrypted PDUs In receive encrypted standard, server-total read is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result, cifs handl...
CVE-2026-98222: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of databloblen encryptedkeyalloc stores databloblen in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16MAX, the assignment truncates the allocation...
CVE-2026-101258: Out-of-bounds Write
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
PT-2026-106551
In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob len encrypted key alloc stores datablob len in a u16. It is computed from multiple string and payload lengths. If the result exceeds U16 MAX, the assignment truncates the allocati...
CVE-2026-104037: Out-of-bounds Read
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...
PT-2026-107287
NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service...
ROS-20261006-73-0315
The vulnerability in the drivers/pmdomain/imx/imx8m-blk-ctrl.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-65122: Out-of-bounds Read
NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service...
CVE-2026-77178
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...
PT-2026-107071
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out of bounds read exists in Skia, a graphics library used by the browser. A local attacker could use social engineering to trick a user into opening a crafted file, potentially...
PT-2026-106977
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...
PT-2026-106904
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_21557)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621557 advisory. kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA...
PT-2026-106957
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out of bounds read exists in the Printing component on Windows. This issue allows a remote attacker, who has already compromised the renderer process and used social engineering, to...
CVE-2026-106284: Out-of-bounds Read
Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106290: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the `raw_send_hdrinc()` function in the `net/ipv4/raw.c` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rawsendhdrinc function in the net/ipv4/raw.c component of the Linux kernel is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...