23744 matches found
UBUNTU-CVE-2026-16404
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153...
SUSE CVE-2026-53366
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In ipappenddata, when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen;...
SUSE CVE-2026-63947
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidpinputreport hidpinputreport reads keyboard and mouse payload data from an skb without first verifying that skb-len contains enough data. hidprecvintrframe pulls the 1-byte HIDP...
SUSE CVE-2026-64068
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfsretryreadsubrequests and netfsretrywritestream to take the appropriate lock when adding extra subrequests into stream-subrequests...
SUSE CVE-2026-64101
In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-specific RPC input buffer with fwctlrpc.inlen and passes that buffer to the driver callback. pdsfcfwrpc casts the buffer to struct fwctlrpcpds...
SUSE CVE-2026-64113
In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames whose source MAC matches the VF's own address VEPA multicast workaround by freeing the skb and continuing to the next descriptor:...
SUSE CVE-2026-64191
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...
CVE-2026-16361
Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbi...
CVE-2026-16360
Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox...
CVE-2026-16410
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
ROOT-APP-NPM-CVE-2023-32313 CVE-2023-32313 in @rootio/vm2 - Patched by Root
Root has patched CVE-2023-32313 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44005 CVE-2026-44005 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-44005 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
CLEANSTART-2026-GN31514 Security fixes for CVE-2026-42504 applied in versions: 3.3.31-r0
Security vulnerability affects the newrelic-infrastructure-bundle package. This issue is resolved in later releases. See references for vulnerability details...
OPENSUSE-SU-2026:21388-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...
CLEANSTART-2026-ID74762 Security fixes for CVE-2026-41080, CVE-2026-45186 applied in versions: 2.35.9-r1, 2.35.9-r2
Multiple security vulnerabilities affect the aws-cli package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AC64135 Security fixes for CVE-2020-11100 applied in versions: 2.1.4-r0
Security vulnerability affects the haproxy package. This issue is resolved in later releases. See references for vulnerability details...
RHEL 8 : kernel (RHSA-2026:42552)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42552 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/mana: Remove user...
Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...
GHSA-F48W-9M4C-M7F5 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)
Summary The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names containing "' /= or whitespace are dropped. A second attribute-rendering path, renderHTMLElement in packages/astro/src/runtime/server/render/dom.ts, has it...
