33476 matches found
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
...
HID: core: fix number/pointer type confusion on long items
...
io_uring: defer eventfd signaling when queued from a wakeup handler
...
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
...
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
...
xhci: dbgtty: Fix unregister on tty_register_driver() failure
...
KVM: s390: vsie: zero stale crypto bits
...
vlan: fix skb_under_panic and races when toggling HW VLAN offload
...
UEFI BIOS embedded Shell can be used to bypass Secure Boot
...
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...
Chromium CVE-2026-87536: Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
...
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
...
Chromium: CVE-2026-85046 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild...
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
...
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
...
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
...
undici vulnerable to Denial of Service via orphaned RetryHandler response body
...
undici vulnerable to downstream response splitting via retry interceptor
...
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
...
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
...
Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
...
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
...
Winsock Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
Windows HTTP Print Provider Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Host Guardian Service Elevation of Privilege Vulnerability
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
Windows Win32k Elevation of Privilege Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
Windows USB Video Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
Windows Device Association Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
Windows Accounts Control Elevation of Privilege Vulnerability
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...
Windows Remote Desktop Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Windows Win32K Security Feature Bypass Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
Windows TCP/IP Security Feature Bypass Vulnerability
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...