43552 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-7902
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM...
Linux Distros Unpatched Vulnerability : CVE-2026-7947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process...
Linux Distros Unpatched Vulnerability : CVE-2026-7980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-43240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kexec: add a sanity check on previous kernel's ima kexec buffer When the second-stage kernel is booted via kexec with a limiting command line such as mem=,...
Linux Distros Unpatched Vulnerability : CVE-2026-43155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mux: mmio: fix regmap leak on probe failure The mmio regmap that may be allocated during probe is never freed. Switch to using the device managed allocator so...
Linux Distros Unpatched Vulnerability : CVE-2026-8092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we...
CVE-2026-43258
A flaw was found in the Linux kernel, specifically affecting Alpha systems when memory compaction is enabled. Insufficient Translation Lookaside Buffer TLB shootdown during page migration can lead to sporadic user-space crashes and heap corruption. This vulnerability can result in application...
CVE-2026-40195
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket import logic allows an authenticated user with access to the storage bucket feature to cause the Incus daemon to crash. The vulnerability is present in the backup...
CVE-2026-40197
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The custom volume backup import subsystem...
CVE-2026-41305 vulnerabilities
Vulnerabilities for packages: authentik-fips, vite, homepage, py3-captum, arangodb, pelias-api, gitlab-rails-ce, vitess, nextcloud-server, jitsucom-jitsu, keep, kubeflow-katib, drupal, langfuse, langfuse-fips, gitlab-rails-ce-fips, renovate, authentik, keep-fips, saf...
GHSA-QX2V-QP2M-JG93 vulnerabilities
Vulnerabilities for packages: authentik-fips, vite, homepage, py3-captum, arangodb, pelias-api, gitlab-rails-ce, vitess, nextcloud-server, jitsucom-jitsu, keep, kubeflow-katib, drupal, langfuse, langfuse-fips, gitlab-rails-ce-fips, renovate, authentik, keep-fips, saf...
CVE-2026-42203 vulnerabilities
Vulnerabilities for packages: litellm, airflow...
GHSA-57J5-QWP2-VQP6 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...
CVE-2026-41131 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...
CVE-2026-7953
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
CVE-2026-6691
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...
BIT-JAVA-MIN-2026-20652
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service...
BIT-JAVA-MIN-2026-20635
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash...
BIT-JAVA-2023-42917
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...
