23486 matches found
GHSA-6W89-9JRV-4J59 vulnerabilities
Vulnerabilities for packages: firefox...
CUAHarm
衡量计算机使用代理的危害性 🤗 Hugging Face 📄 论文 📋 简介 CUAHarm 是一个基准测试，旨在评估计算机使用代理（CUA）的安全风险——即能够自主控制计算机执行多步骤操作的 AI 代理。 主要特性 🔍 CUAHarm 数据集 ：包含 104 个真实滥用场景，其中 52 个是需要直接系统交互的计算机使用任务。这些任务涵盖七类恶意目标：凭据窃取、权限提升、网络利用、系统破坏、数据篡改、取证规避和工具利用。 💻 直接终端访问 ：CUAHarm 支持通过直接终端交互为计算机使用代理提供完整的系统访问权限。 💰 Token 成本计算 ：内置功能，用于跟踪代理执行过程中的 Tok...
CVE-2026-80862
This Linux kernel vulnerability affects the nvme-tcp subsystem. The page_frag_cache is used to preallocate PDU buffers for preallocated block device requests, but since block devices are created in parallel threads, the cache is accessed in a thread-unsafe manner. This leads to incorrect refcount...
CVE-2026-80862 nvme-tcp: fix usage of page_frag_cache
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently pagefragcache is used in not thread-safe...
GHSA-X5WW-48C3-RP9J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6J37-MH6C-P74W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7JV8-R36R-863G vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6M3V-59WP-4J9Q vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-V6J9-JH3Q-JQQ6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-43CM-8P8Q-H9J3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G538-2VJJ-8JX9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GQ66-W869-W9PW vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-49509
Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...
Linux Distros Unpatched Vulnerability : CVE-2026-80862
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in...
CVE-2026-49509
Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630...
CVE-2026-71222
A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...
EUVD-2026-69708
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
UBUNTU-CVE-2026-84640
A maliciously constructed mail header could lead to a one byte read pa...
EUVD-2026-69394
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...