23146 matches found
MINI-27R5-MHQ9-6HMV
Bulletin has no description...
ROS-20260817-73-0217
The vulnerability in Ruby is related to uncontrolled resource consumption due to filtering and reducing data to unsafe values during the processing of HTTP headers. Exploiting this vulnerability can allow an attacker to cause service failures, provided that the default configurations of...
CVE-2026-65347: Uncontrolled Resource Consumption
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service...
CVE-2026-65346: Integer Overflow or Wraparound
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution...
PT-2026-76861
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description Processing an image may lead to a denial-of-service, which is a condition where a system becomes unavailable to its intended users...
PT-2026-76860
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description An integer overflow occurs during image processing, which may lead to arbitrary code execution. This issue was addressed by...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101077)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101077 advisory. A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes t...
ROS-20260817-73-0211
The vulnerability in python-setuptools is related to incorrect data processing based on the Unicode encoding standard. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Important: pcp
Issue Overview: A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. CVE-2026-16526 A signed integer overflow in the PCP pmGetPDU function can be...
PT-2026-76655
Name of the Vulnerable Software and Affected Versions extract-zip versions prior to 2.0.2 Description Containment checks only verify the parent directory of each archive entry and ignore the entry's own final path component. This allows an archive containing two entries with identical names—a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022351)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022351 advisory. GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...
Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099508)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099508 advisory. In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in the...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100879)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100879 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17....
Unity Linux 20.1070e Security Update: NetworkManager (UTSA-2026-099514)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099514 advisory. A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer...
The vulnerability of the sbs-battery.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sbs-battery.c component in the Linux operating system is related to a situation where there is a race in the signal processing mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the caiferials.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the caiferials.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the goldfish_battery.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the goldfishbattery.c component in the Linux operating system is related to a situation involving signal processing. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the cpcap-battery.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the cpcap-battery.c component in the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the act8945a_charger.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the act8945acharger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-73057
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...