28424 matches found
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Chromium: CVE-2026-13954 Insufficient policy enforcement in XML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Tarfile.extract() doesn't fully respect filter parameter
...
MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error
...
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
...
Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
...
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
...
Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
...
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
...
Chromium: CVE-2026-14090 Out of bounds read in CameraCapture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure OpenAI Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure OpenAI allows an authorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network...
ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
...
drm/i915/gem: Fix phys BO pread/pwrite with offset
...
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
...
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
...
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
...
hsr: Remove WARN_ONCE() in hsr_addr_is_self().
...
drm/virtio: Fix driver removal with disabled KMS
...
net: bonding: fix NULL pointer dereference in bond_do_ioctl()
...
debugobjects: Do not fill_pool() if pi_blocked_on
...
net: rds: clear i_sends on setup unwind
...
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
...
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
...
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
...
Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces
...
Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher
...
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body
...
Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip
...
Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service
...
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
...
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
...
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
...
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
...
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
...
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
...