155423 matches found
PT-2026-107507
llama.cpp before b11393 contains a use-after-free and double free vulnerability in common chat peg mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current tool pointer. Attackers can submit a chat parser in a POST /completion request emitting a tool-...
CVE-2026-106204
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed...
CVE-2026-106283
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 al...
CVE-2026-106339
Use of released resource in Core in Google Chrome prior to 155.0.8059...
CVE-2026-106211
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 all...
CVE-2026-106233
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo...
CVE-2026-106310
Use of released resource in FontAccess in Google Chrome prior to 155.0...
Unbreakable Enterprise kernel security update
5.15.0-325.220.5 - octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng Orabug: 39951718 - batman-adv: Remove stale reason member from batadvtpvars Vijayendra Suman Orabug: 39966037 - Revert 'octeontx2-pf: Fix leak of SQ timestamp buffer on teardown' Vijayendra Suman Orabug: 39967930 -...
Linux Distros Unpatched Vulnerability : CVE-2026-106335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4543-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4543-1 advisory. Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the...
Linux Distros Unpatched Vulnerability : CVE-2026-106411
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
MiracleLinux 8 : thunderbird-140.16.0-1.el8_10.ML.1 (AXSA:2026-1976:23)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1976:23 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...
Linux Distros Unpatched Vulnerability : CVE-2026-106281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted...
RHEL 9 : kernel (RHSA-2026:77215)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77215 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: linux/dim: Fix divide by 0 in...
Linux Distros Unpatched Vulnerability : CVE-2026-106200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
CVE-2026-106193
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow...
CVE-2026-106248
Use after free in Bindings in Google Chrome prior to 155.0.8059.39 all...
PT-2026-107503
In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit skb hint in tcp send synack When tcp send synack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcp rtx queue unlink and free and only...