BIT-TOMCAT-2026-79677 Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.5...

BIT-RABBITMQ-2026-67224 RabbitMQ: Admin path-traversal write via trace name

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

Security Bulletin: Due to use of VMware ESXi and vCenter, IBM Cloud Pak System is affected by multiple vulnerabilities.

Summary Vulnerabilities in VMware ESXi and vCenter affect IBM Cloud Pak System. IBM Cloud Pak System version 2.3.6.2 has addressed these vulnerabilities. Cloud Pak Sytem has updated Platform System Manager PSM and workload nodes to VMware ESXi 83U3k and VMware vCenter to VCSA 83U3k. Vulnerability...

CLEANSTART-2024-YS67864 Out of bounds write in TabStrip in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in TabStrip in Google Chrome prior to 91...

CLEANSTART-2024-IC10975 Out of bounds write in ANGLE in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...

CLEANSTART-2024-UP16796 Out of bounds write in ANGLE in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...

CLEANSTART-2024-DU13933 Out of bounds write in Autofill in Google Chrome prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Autofill in Google Chrome prior to 92...

CLEANSTART-2024-DM83445 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92...

CLEANSTART-2024-WX22664 Out of bounds write in Tab Groups in Google Chrome prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome prior to 92...

CLEANSTART-2024-BI69034 Out of bounds write in V8 in Google Chrome prior to 93

Security vulnerability affects the chromium package. Out of bounds write in V8 in Google Chrome prior to 93...

CLEANSTART-2025-UQ49615 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

Security vulnerability affects the exim package. Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability...

SUSE-SU-2026:4409-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. - CVE-2026-18304: TIF File...

thrift: thrift: Denial of Service via integer underflow in THeaderTransport

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

CLEANSTART-2023-SN97100 out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText

Security vulnerability affects the djvulibre package. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Подробный технический анализ уязвимости локального повышения привилегий CVE-2026-43284 Dirty Frag в ядре Linux. CVE-2026-43284 обычно упоминаемая как часть набора уязвимостей Dirty Frag — это критическая уязвимость локального повышения привилегий LPE в ядре Linux. Она...

Chromium CVE-2026-87438: Out of bounds write in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

A vulnerability exists in certain ASUS motherboards due to improper initialization . This flaw allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device . The vulnerability has a high severity score of 7.0 (CVSS 4.0) and requires physical access....