24590 matches found
Forward Secrecy Violation in WolfSSL TLS 1.3
...
ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
...
Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
...
f2fs: zone: fix to avoid inconsistence in between SIT and SSA
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libvirt: information disclosure via world-readable vm snapshots
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
...
Denial of service vulnerability in HAProxy mjson library
...
Grub2: missing unregister call for normal_exit command may lead to use-after-free
...
Grub2: grub2: out-of-bounds write via malicious usb device
...
Grub2: missing unregister call for normal commands may lead to use-after-free
...
Grub2: missing unregister call for gettext command may lead to use-after-free
...
Grub2: use-after-free in net_set_vlan
...
Grub2: use-after-free in grub_file_close()
...
HID: nintendo: avoid bluetooth suspend/resume stalls
...
drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
...
Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
...
KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
...
ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock
...
KubeVirt Vulnerable to Arbitrary Host File Read and Write
...
Azure Monitor Elevation of Privilege Vulnerability
...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
Azure Bastion Elevation of Privilege Vulnerability
...
Azure Application Gateway Elevation of Privilege Vulnerability
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
Azure Application Gateway Elevation of Privilege Vulnerability
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Microsoft Defender Portal Spoofing Vulnerability
...
Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
ax25: fix incorrect dev_tracker usage
...
tty: n_gsm: fix deadlock and link starvation in outgoing data path
...
Rsync: Out of bounds array access via negative index
...
mptcp: do not queue data on closed subflows
...
mruby array.c sort_cmp use after free
...
bpf: fix potential 32-bit overflow when accessing ARRAY map element
...
Bluetooth: When HCI work queue is drained, only queue chained work
...
net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null
...
mptcp: move subflow cleanup in mptcp_destroy_common()
...
Chromium: CVE-2025-13224 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-13223 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-13223 exists in the wild...
net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
...
Potential denial of service in golang.org/x/crypto/ssh/agent
...
dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
...
net: mctp: Don't access ifa_index when missing
...
ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot
...
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
...
f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data
...