Linux netfilter SIP Component Data Compromise

The vulnerability of the net/netfilter/nfnatsip.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel Architecture Data Compromise

The vulnerability in the components arch/mips/bmips/setup.c and arch/mips/bmips/dma.c of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML page...

PT-2026-120494

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

Google Chrome Bluetooth Data Compromise

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to lack of access control. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

ServiceWorker Access Information Disclosure

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

WebProtect Components Protected Information Access

The vulnerability of the WebProtect components for Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Siemens Software Center Uncontrolled Search Path Code Execution

The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges using a specially created DLL file...

USB Component DoS

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially crafted HTML page...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

MariaDB Name Reference Code Execution

The vulnerability of the MariaDB database management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

PT-2026-120244

Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create from blueprint by uint256 subtraction without first checking that code offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code offset can make a factory...

Apache AsterixDB 0.9.9 Missing Authentication

Summary Apache AsterixDB is a highly scalable data management system that can store, index, and manage semi-structured data, e.g., much like MongoDB, but it also supports a full-power query language with the expressiveness of SQL and more. Unlike analytics engines like Apache Hive or Apache Spark...

PT-2026-120171

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd server select format DVI ADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDC FORMATS PDUs with an nBlockAlign too small...

Linux kernel Control Flow

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20261021-73-0089

The vulnerability in gpac is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Chromoting Remote Administration DoS

The vulnerability of the Chromoting remote administration tool, which is used by browsers such as Google Chrome and Microsoft Edge, relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to cause service interruptions...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Device web browsers Google Data Compromise

The vulnerability of the Device web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...