40007 matches found
EUVD-2026-71616
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...
CVE-2026-80913
CVE-2026-80913 affects the SELinux subsystem of the Linux kernel . The root cause is that p_bools.nprim in a loaded SELinux policy image can declare a count larger than the number of boolean values actually present, causing cond_index_bool() to leave NULL entries in bool_val_to_struct[]. Consumer...
CVE-2026-80912 selinux: reject an unclaimed class value in security_get_classes()
In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...
CVE-2026-80913 selinux: require every boolean value to be defined
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...
CVE-2026-80913 selinux: require every boolean value to be defined
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...
Linux Distros Unpatched Vulnerability : CVE-2026-80913
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fill...
Linux Distros Unpatched Vulnerability : CVE-2026-85044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web...
Linux Distros Unpatched Vulnerability : CVE-2026-80757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the...
PT-2026-86204
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined p bools.nprim comes from the policy image independently of how many booleans follow it, and cond index bool fills bool val to struct at value - 1, so a count larger than the valu...
CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85044
A flaw was found in Google Chrome on Android. This vulnerability involves the improper use of a released resource, which could allow a remote attacker to bypass the web origin policy. The web origin policy is a security mechanism that prevents malicious websites from interacting with legitimate...
EUVD-2026-70713
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85044
CVE-2026-85044 is a use of released resource flaw in the Mobile component of Google Chrome on Android (versions prior to 152.0.7977.82 ). A remote attacker, leveraging social engineering and a crafted HTML page, can bypass the web origin policy , allowing unauthorized cross-site interaction with ...
CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
Security Bulletin: MongoDB Enterprised Advanced affected by: Interpretation Conflict (CVE-2026-13676)
Summary There are vulnerabilities in fast-uri-3.1.2.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-13676. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicod...
Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-178)
Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. Affected Versions: Fixes should be...