24507 matches found
Chromium: CVE-2026-4441 Use after free in Base
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4440 Out of bounds read and write in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
mm/hugetlb: fix hugetlb_pmd_shared()
...
gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames
...
gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response
...
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
...
perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
...
net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
...
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
...
Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4453 Integer overflow in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack
...
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
...
nghttp2 Denial of service: Assertion failure due to the missing state validation
...
fbdev: rivafb: fix divide error in nv3_arb()
...
apparmor: fix unprivileged local user can do privileged policy management
...
f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
...
io_uring/rw: free potentially allocated iovec on cache put failure
...
btrfs: do not free data reservation in fallback from inline due to -ENOSPC
...
apparmor: validate DFA start states are in bounds in unpack_pdb
...
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
...
net: add proper RCU protection to /proc/net/ptype
...
Azure Data Factory Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Azure DevOps: msazure Elevation of Privilege Vulnerability
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Microsoft Purview Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
Microsoft Bing Tampering Vulnerability
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
Microsoft Purview Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
Azure Cloud Shell Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network...
Incomplete control character validation in http.cookies
...
Stack overflow parsing XML with deeply nested DTD content models
...
pyOpenSSL DTLS cookie callback buffer overflow
...
pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback
...
fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
...
RDMA/umad: Reject negative data_len in ib_umad_write
...
nvme: fix memory allocation in nvme_pr_read_keys()
...
wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
...
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
...
fs: ntfs3: check return value of indx_find to avoid infinite loop
...
perf/core: Fix refcount bug and potential UAF in perf_mmap
...
net/sched: act_gate: snapshot parameters with RCU on replace
...
RDMA/siw: Fix potential NULL pointer dereference in header processing
...
f2fs: fix to avoid mapping wrong physical block for swapfile
...
audit: add fchmodat2() to change attributes class
...