116875 matches found
kernel: net: pull headers in qdisc_pkt_len_segs_init()
A flaw was found in the Linux kernel's handling of Generic Segmentation Offload GSO packet headers. This vulnerability occurs when the qdiscpktlensegsinit function does not properly pull headers into the expected memory location, which can lead to incorrect processing by network drivers. A remote...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2026-74860 Libxml2: double-free/uaf in libxml2 python bindings
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
CVE-2026-62650
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control RBAC restrictions to be bypassed through manipulation of request data. This could allow an...
ROS-20260908-73-0023
The vulnerability in perl-Crypt-DSA is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260908-73-0058
The vulnerability in nvidia-kmod is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
PT-2026-88735
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Payments allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...
PT-2026-88547
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...
PT-2026-88531
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Extensions allows a remote attacker to obtain sensitive information through the use of a crafted Chrome extension. Recommendations Update Google Chrome to versi...
PT-2026-88720
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in SVG allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to versio...
PT-2026-88607
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome ...
PT-2026-88685
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A double free issue exists in PDFium, a PDF rendering engine, which allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a specially crafted PDF...
PT-2026-88751
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...
PT-2026-88558
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...
PT-2026-88722
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing accounts from other providers allows a remote attacke...
PT-2026-88561
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Core component that allows a remote attacker to leak cross-origin data through the use of a crafted Chrome extension. Cross-origin data refers to...
PT-2026-88584
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...
PT-2026-88691
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. Recommendations Update Google Chrome to version...