21701 matches found
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
...
ibmasm: fix heap over-read in ibmasm_send_i2o_message()
...
erofs: fix the out-of-bounds nameoff handling for trailing dirents
...
media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
...
ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
...
md/raid10: fix deadlock with check operation and nowait requests
...
ALSA: caiaq: fix usb_dev refcount leak on probe failure
...
Cargo can be coerced to share credentials between registries
...
Crates in third party registries can override the cached source of other crates
...
Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy
...
NGINX ngx_http_rewrite_module vulnerability
...
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
...
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
...
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
...
Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
...
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
...
Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
...
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
...
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
...
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
...
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
...
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
...
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
...
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
...
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
...
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
...
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
...
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
...
Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
...
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
...
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
...
Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
...
libyang - Heap Use-After-Free Write in XML Metadata Parsing
...
net: skbuff: preserve shared-frag marker during coalescing
...
net: skbuff: propagate shared-frag marker through frag-transfer helpers
...
NGINX JavaScript vulnerability
...
Missing exit out of permission check in haveged could lead to root exploit
...
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
...
Unbounded resend loop in BIND 9 resolver
...
SIG(0) validation during query flood may lead to undefined behavior
...
Invalid handling of CLASS != IN
...
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
...
BIND 9 server memory exhaustion during GSS-API TKEY negotiation
...
net/rds: reset op_nents when zerocopy page pin fails
...
net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
...
ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
...
net/rds: handle zerocopy send cleanup before the message is queued
...
fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
...
rtmutex: Use waiter::task instead of current in remove_waiter()
...
Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...