32226 matches found
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
...
HID: core: fix number/pointer type confusion on long items
...
io_uring: defer eventfd signaling when queued from a wakeup handler
...
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
...
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
...
xhci: dbgtty: Fix unregister on tty_register_driver() failure
...
KVM: s390: vsie: zero stale crypto bits
...
vlan: fix skb_under_panic and races when toggling HW VLAN offload
...
UEFI BIOS embedded Shell can be used to bypass Secure Boot
...
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...
Chromium CVE-2026-87536: Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
...
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
...
Chromium: CVE-2026-85046 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild...
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
...
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
...
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
...
undici vulnerable to Denial of Service via orphaned RetryHandler response body
...
undici vulnerable to downstream response splitting via retry interceptor
...
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
...
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
...
Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
...
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
...
Windows Core Messaging Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
Windows Device Association Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
Windows DCOM Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Windows iSCSI Remote Code Execution Vulnerability
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...
Microsoft Excel Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
Microsoft Excel Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...