28400 matches found
bpf: use kvfree() for replaced sysctl write buffer
...
nfsd: reset write verifier on deferred writeback errors
...
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
...
netfilter: nf_tables: add hook transactions for device deletions
...
nfsd: release layout stid on setlease failure
...
esp: fix page frag reference leak on skb_to_sgvec failure
...
Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
...
i2c: core: fix adapter registration race
...
drm/msm: always recover the gpu
...
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
...
NFSv4/flexfiles: reject zero filehandle version count
...
block: Avoid mounting the bdev pseudo-filesystem in userspace
...
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
...
drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
...
gcov: use atomic counter updates to fix concurrent access crashes
...
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
...
NGINX ngx_http_ssi_module vulnerability
...
NGINX Map directive and Regex matching vulnerability
...
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
Excon: redact additional sensitive/risky headers when following redirects
...
Squid: Memory corruption in cache_digest reply handling
...
Squid: Memory disclosure in FTP gateway
...
CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
...
Chromium: CVE-2026-15905 Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15904 Use after free in Ozone
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15903 Out of bounds read and write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15902 Use after free in Cast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15901 Use after free in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15900 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15899 Use after free in CameraCapture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
...
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
...
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
...
DBI::ProfileData versions before 1.651 for Perl do not limit the path index
...
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
...
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
...
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
...
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
...
Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service
...
Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption
...
Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string
...
Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak
...
Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation
...
ipv4: account for fraggap on the paged allocation path
...
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
...
Chromium: CVE-2026-15776 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15775 Insufficient policy enforcement in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15774 Use after free in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15773 Use after free in Core
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...