186049 matches found
EUVD-2026-90872
next.js cache leak across root param values in nested 'use cache' functions...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL (CVE-2026-82418)
Summary IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition, due to versions of OpenSSL included in wheels prior to cryptograph 48.01 which could allow specially crafted PKCS7 or S/MIME signed messages to trigger a use-after-free during PKCS7 signature verification...
EUVD-2026-85608
Librsvg: Use-after-free when XML includes have duplicated entities...
GHSA-CPVR-W4J5-2MPG Librsvg: Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
Librsvg: Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Testeur CVE-2026-109618 / CVE-2026-109619 php2shell Un scri...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash bsc1277001. CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpected...
SUSE-SU-2026:4868-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: - CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash bsc1277001. - CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpect...
OESA-2026-4482 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4481 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4480 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2026-4471 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4469 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4470 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4468 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4452 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Sandbox escape in the Security: Process Sandboxing component of Mozilla Firefox. An attacker could exploit this vulnerability to break out of the browser's process sandbo...
OESA-2026-4451 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Sandbox escape in the Security: Process Sandboxing component of Mozilla Firefox. An attacker could exploit this vulnerability to break out of the browser's process sandbo...
OESA-2026-4415 libarchive security update
is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...