7919 matches found
CVE-2026-11659 vulnerabilities
Vulnerabilities for packages: chromium...
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...
CVE-2026-34180 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
Stable Channel Update for Desktop
The Stable channel has been updated to 149.0.7827.114/.115 for Windows and Mac and 149.0.7827.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...
AMD CPU OP Cache May 2026 Security Update
AMD has informed HP of a potential security vulnerability in some AMD Processors which might allow escalation of privilege or arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has...
CVE-2026-0274
An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources...
CVE-2026-45380 bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`
bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder::restoreSymlink allows an attacker to craft a .7z archive that, when extracted with bit7z on any non-Windows platform,...
CVE-2026-45328
creationtimestamp| type| source ---|---|--- 2026-06-10 03:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvpsfjeoy27 2026-06-10 03:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116723576453195786 2026-06-10 03:00:44+00:00| seen|...
CLEANSTART-2026-BD44609 On Unix platforms, when listing the contents of a directory using File
Multiple security vulnerabilities affect the dcgm-exporter package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...
PT-2026-48558
Name of the Vulnerable Software and Affected Versions Prisma Access Agent on Linux affected versions not specified Description A privilege escalation issue in the Prisma Access Agent app on Linux devices allows a local user to execute code with elevated privileges. This is caused by the incorrect...
Scammers love Meta, according to Lloyds Bank
Scammers go phishing wherever the victims are. In the UK, that means Facebook, Instagram, and WhatsApp, according to Lloyds Bank. It just revealed that Meta platforms account for over two thirds of fraud reports made by its customers. Writing in The Sunday Times, Lloyds Bank's fraud prevention...
The Hidden Security Risk in Modern Networks: The Work Between Tools
Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours, causing significant...
Microsoft Windows Storage 权限许可和访问控制问题漏洞
Microsoft Windows Storage is a data storage solution provided by the American company Microsoft. There are code-related vulnerabilities in Microsoft Windows Storage. Attackers can exploit these vulnerabilities to gain elevated privileges. The following products and versions are affected: Windows ...
AMD “Zen 5” Processors – RDSEED Failure
AMD has informed HP of a potential security vulnerability in some AMD “Zen 5” Processors, which might allow loss of confidentiality and integrity. AMD is releasing firmware updates to mitigate these vulnerabilities AMD has released updates to mitigate the potential vulnerability. HP has identifie...
GHSA-JHP3-H4HP-2C3P vulnerabilities
Vulnerabilities for packages: libssh2...
Introducing Wiz Cloud Cost: Powering Cost Management and Optimization with Context
Wiz unifies cloud and AI cost visibility to help teams eliminate waste and improve spend efficiency across their AWS, Azure, and GCP environments...
GHSA-W93M-F8FX-95GR vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-28986
A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination...
CVE-2026-40907
WWBN AVideo is an open source video platform. In versions 29.0 and prior, the endpoint plugin/Live/view/Liverestreams/list.json.php contains an Insecure Direct Object Reference IDOR vulnerability that allows any authenticated user with streaming permission to retrieve other users' live restream...