28877 matches found
x86/efi: defer freeing of boot services memory
...
can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
...
ksmbd: Compare MACs in constant time
...
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
...
scsi: target: Fix recursive locking in __configfs_open_file()
...
tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
...
net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
...
atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
...
scsi: pm8001: Fix use-after-free in pm8001_queue_command()
...
Squashfs: check metadata block offset is within range
...
i40e: Fix preempt count leak in napi poll tracepoint
...
ALSA: usb-audio: Use correct version for UAC3 header validation
...
bpf: Fix stack-out-of-bounds write in devmap
...
netfilter: nf_tables: release flowtable after rcu grace period on error
...
scsi: core: Fix refcount leak for tagset_refcnt
...
drbd: fix null-pointer dereference on local read error
...
ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
...
PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
...
netfilter: xt_CT: drop pending enqueued packets on template removal
...
net: usb: kaweth: validate USB endpoints
...
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
...
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
...
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
...
systemd: Local unprivileged user can trigger an assert
...
Vim affected by Command injection via newline in glob()
...
webbrowser.open() allows leading dashes in URLs
...
tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling
...
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
...
Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources
...
Libsoup: libsoup: authentication bypass via digest authentication replay attack
...
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
...
Libarchive: libarchive: denial of service via malformed iso file processing
...
tar-rs incorrectly ignores PAX size headers if header size is nonzero
...
tar-rs: unpack_in can chmod arbitrary directories by following symlinks
...
strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow
...
Chromium: CVE-2026-4464 Integer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4463 Heap buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4462 Out of bounds read in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4461 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4460 Out of bounds read in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4458 Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4457 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4456 Use after free in Digital Credentials API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4455 Heap buffer overflow in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4454 Use after free in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4452 Integer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4450 Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4449 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...