ROS-20260915-73-0158

The vulnerability of the Chromecast web browsers Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260728-73-0018

The vulnerability in python-PyPDF2 is related to errors in processing XML entities. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software lies in errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

The vulnerability of the npm library extract-zip’s mechanism for processing symbolic links allows a hacker to execute arbitrary code.

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

ROS-20260702-73-0089

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Multiple Mozilla product logic processing errors (CNVD-2026-26387)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have vulnerabilities related to...

Multiple Mozilla product logic processing errors (CNVD-2026-26878)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to errors in information processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s Cocoa browser engine, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird have vulnerabilities related to information processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NTLM protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM protocol implementation in Windows operating systems is related to errors in information processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the decoding process. An attacker can cause application crashes or bypass memory allocation limits by supplying specially crafted Avro data that exploits integer arithmetic errors during decoding...

The vulnerability of the Border Gateway Protocol (BGP) in the Cisco NX-OS operating system of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP on Cisco NX-OS operating systems of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches is related to permission processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Open WebUI web interface, based on artificial intelligence, relates to errors in information processing, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Open WebUI-based web interface is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Open WebUI web interface, based on artificial intelligence, relates to errors in information processing, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Open WebUI-based web interface is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microsoft Enterprise Security Token Service in terms of authentication and token management, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Enterprise Security Token Service for authentication and token management is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in information processing, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in information processing. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Microsoft Partner Center software, related to errors in processing hypertext links, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Partner Center software is related to errors in processing hypertext links. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the __unmap_hugepage_range() function in the mm/hugetlb.c file of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file, belonging to the memory management subsystem of the Linux kernel, is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...