Lucene search
+L

17998 matches found

Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.13 views

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

9.6CVSS6AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.12 views

PT-2026-81829

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to read...

9.6CVSS6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.11 views

PT-2026-81480

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description The PyOpenEXR Python bindings return stale heap data when reading a specially crafted deep scanline EXR file that utilizes layer-prefixed RGB channels. Whe...

4.3CVSS5.3AI score0.00233EPSS
SaveExploits0References27
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:00 a.m.4 views

The vulnerability of the process_sdp() function in the net/netfilter/nf_conntrack_sip.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

5.8CVSS4.2AI score0.0012EPSS
SaveExploits0References12Affected Software3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.9 views

PT-2026-81700

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially obtain cross-origin data by using a crafted HTML page. Recommendations Update...

9.6CVSS6AI score0.0056EPSS
SaveExploits1References334
RedHat Linux
RedHat Linux
added 2026/08/24 11:31 p.m.19 views

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

8.8CVSS5.5AI score0.0071EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/24 11:30 p.m.13 views

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

8.8CVSS7.7AI score0.0071EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/24 4:29 p.m.11 views

CVE-2026-74670

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. During the initial setup of the IPVS estimator, if the network namespace is removed, the estimator may continue operating with uninitialized limits. This can lead to an out-of-bounds write when processing network statistics,...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 4:00 p.m.8 views

CVE-2026-74659

A flaw was found in the Linux kernel's Multiple Registration Protocol MRP bridge module. When constructing MRP test frames, the brmrpalloctestskb function fails to properly initialize certain fields. This oversight results in three uninitialized bytes being transmitted in every MRA MRPTest frame,...

5.5CVSS5.2AI score0.00173EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 1:31 p.m.9 views

CVE-2026-74617

A flaw was found in the Linux kernel's dibs device driver. The dibs-lock was not properly initialized when a dibs device was allocated, allowing a Global ID GID event interrupt to occur before the lock was ready. This could lead to the system attempting to acquire an uninitialized lock, potential...

9.8CVSS5.4AI score0.00442EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 1:30 p.m.8 views

CVE-2026-74602

A flaw was found in the Linux kernel's ring-buffer component. The rballocatecpubuffer function failed to initialize the bpage-order value, leaving it as zero. This uninitialized value is later used by freebufferpage when deallocating ring-buffers with sub-buffers larger than a page size. An...

5.5CVSS5.4AI score0.00168EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 11:12 a.m.9 views

CVE-2026-74673

A flaw was found in the Linux kernel's evdev component. This vulnerability occurs because certain data structures, specifically inputevent, are not fully cleared before being sent to user applications. This can result in uninitialized memory from the kernel's internal stack being exposed to an...

5.5CVSS5.3AI score0.00177EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT, used for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails, it returns a null pointer and may leave the z variable uninitialized. If the caller also sets the vertical flipping flag, the process continues by calling...

7.5CVSS7.2AI score0.01137EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.4 views

Astra Linux – Vulnerability in libslirp

An invalid pointer initialization issue was discovered in the SLiRP networking implementation of QEMU. The flaw resides in the bootpinput function and can occur when processing an UDP packet that is smaller than the size of the ‘bootpt’ structure. A malicious guest could exploit this flaw to leak...

3.8CVSS6.7AI score0.00326EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.18 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...

7.1CVSS5.4AI score0.00244EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: usb: idmouse: Fixed an issue where an uninitialized value was present in idmouseopen. In idmousecreateimage, if any ftipcommand fails, it will proceed to the reset label. However, this results in the data in...

6AI score0.00278EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.15 views

Astra Linux – Vulnerability in Qemu

An information disclosure vulnerability was discovered in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw resides in the virglcmdgetcapsetinfo function in contrib/vhost-user-gpu/virgl.c, and can occur due to the reading of uninitialized memory...

6.5CVSS6.6AI score0.00421EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Firefox and Thunderbird

When resolving a symbolic link such as file:///proc/self/fd/1, an error message may be generated if the symbolic link resolves to a string containing uninitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected...

8.8CVSS7.1AI score0.00789EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: UDF: Fixed uninitialized array access for some pathnames For filenames that start with . and are between 2 and 5 characters long, the UDF charset conversion code would read uninitialized memory from the output buffer. The only...

5.5CVSS6.2AI score0.00156EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in binutils

There is a flaw in binutils /opcodes/tic4x-dis.c. An attacker who can submit a crafted input file for processing by binutils could cause the use of uninitialized memory. The greatest threat is to the availability of the application, with a lower threat to data confidentiality. This flaw affects...

6.1CVSS6.7AI score0.01074EPSS
SaveExploits1References2
Rows per page
Query Builder