The vulnerability of the rockchip_sfc_probe() function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipsfcprobe function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the opinfo_add() function in the fs/smb/server/oplock.c module of the Smb subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opinfoadd function in the fs/smb/server/oplock.c module of the Smb subsystem in the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-37007

A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...

PT-2026-82664

Name of the Vulnerable Software and Affected Versions crewai-tools versions prior to 1.10.3 Description A flaw in the FileWriterTool allows a remote attacker to execute arbitrary code. This is achieved by using malicious path traversal sequences—a technique used to access files and directories...

ROS-20260827-73-0042

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260827-73-0030

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API Generic Security Service Application Program Interface tokens. This can lead to excessive memory consumption,...

CVE-2026-73501

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...

SUSE CVE-2026-79274

Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79285

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79291

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79293

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79284

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...

CVE-2026-79246

A flaw was found in chromium-browser. An information leak vulnerability exists in the DataTransfer component of Google Chrome. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page, leading to the disclosure of sensitive information...

CVE-2026-78896

A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...

CVE-2026-79293

A flaw was found in chromium-browser. A remote attacker could exploit an information leak in the Animation component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...

CVE-2026-79242

A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...

CVE-2026-79259

A flaw was found in Google Chrome. Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by providing a specially crafted file, leading to unauthorized access...

CVE-2026-78963

A flaw was found in chromium-browser. Improper input validation in the Media component of Google Chrome could allow a remote attacker to execute arbitrary code outside of the sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page. The primary consequence is...