The vulnerability of the iptfs_reassem_cont() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the iptfsreassemcont function in the net/xfrm/xfrmiptfs.c module, which implements networking functions for the Linux kernel, involves unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the esp_output_done() function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `magicmouse_report_fixup()` function in the `drivers/hid/hid-magicmouse.c` driver module of the Linux kernel’s input device subsystem allows a hacker to trigger a maintenance failure.

The vulnerability of the magicmousereportfixup function in the drivers/hid/hid-magicmouse.c driver of the Linux kernel’s input device subsystem relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the iptfs_clone_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsclonestate function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

EulerOS Virtualization 2.13.1 : python-idna (EulerOS-SA-2026-3189)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-81584

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome...

CVE-2026-79118: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-81829

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to read...

CVE-2026-78914: Use of Uninitialized Resource

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-81839

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to obtain cross-orig...

PT-2026-81700

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially obtain cross-origin data by using a crafted HTML page. Recommendations Update...

EulerOS Virtualization 2.13.0 : bind (EulerOS-SA-2026-3206)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

RHEL 7 : resource-agents (RHSA-2026:59329)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59329 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

Missing Release of Resource after Effective Lifetime

Overview @libp2p/circuit-relay-v2 is an Implementation of Circuit Relay v2 Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime through the reserve path in packages/transport-circuit-relay-v2/src/server/reservation-store.ts. An attacker can grow...

CVE-2026-77337

CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through 3.3.6, and from 4.0.0 through 4.2.0 allow authentication bypass and potential CPU or memory exhaustion when CookieAuthenticator uses...

CVE-2026-77384

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal but unconditionally registers another abort listener on every refresh. As a result, a remote peer can repeatedly send...

CVE-2026-59645

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this vulnerability by providing a specially crafted self-referential IEEE 1609.2 schema to the OER Octet Encoding Rules parser. This can cause the parser to recurse without a depth limit, leading to resource exhaustion an...

CVE-2026-15055

A flaw was found in Bouncy Castle for Java. An attacker could exploit this vulnerability by providing a specially crafted input to the PKCS8 / PBES2 decryptors. This input could specify an excessively high Key Derivation Function KDF cost, causing the decryptor to consume significant computationa...