28877 matches found
Chromium: CVE-2026-4447 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4446 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4445 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4441 Use after free in Base
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4440 Out of bounds read and write in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
mm/hugetlb: fix hugetlb_pmd_shared()
...
gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames
...
gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response
...
pkgutil.get_data() does not enforce documented restrictions
...
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
...
Libsoup: libsoup: header and http request injection via crlf injection
...
Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
...
Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
...
net: add xmit recursion limit to tunnel xmit functions
...
perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
...
net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
...
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
...
net/sched: cls_u32: use skb_header_pointer_careful()
...
Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4453 Integer overflow in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack
...
ALSA: usb-audio: Prevent excessive number of frames
...
ALSA: aloop: Fix racy access at PCM trigger
...
bonding: fix use-after-free due to enslave fail after slave array update
...
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
...
btrfs: do not strictly require dirty metadata threshold for metadata writepages
...
net: fix segmentation of forwarding fraglist GRO
...
netdevsim: fix a race issue related to the operation on bpf_bound_progs list
...
rxrpc: Fix data-race warning and potential load/store tearing
...
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
...
scsi: core: Wake up the error handler when final completions race against each other
...
spi: tegra210-quad: Protect curr_xfer check in IRQ handler
...
nghttp2 Denial of service: Assertion failure due to the missing state validation
...
fbdev: rivafb: fix divide error in nv3_arb()
...
apparmor: fix unprivileged local user can do privileged policy management
...
f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
...
io_uring/rw: free potentially allocated iovec on cache put failure
...
btrfs: do not free data reservation in fallback from inline due to -ENOSPC
...
apparmor: validate DFA start states are in bounds in unpack_pdb
...
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
...
net: add proper RCU protection to /proc/net/ptype
...
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Azure Data Factory Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
Azure DevOps: msazure Elevation of Privilege Vulnerability
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...