24507 matches found
KEYS: fix overflow in keyctl_pkey_params_get_2()
...
wifi: rtw88: usb: fix memory leaks on USB write failures
...
batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
...
nfsd: fix posix_acl leak on SETACL decode failure
...
KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
...
fuse: re-lock request before replacing page cache folio
...
NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
...
net: skmsg: preserve sg.copy across SG transforms
...
serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
...
batman-adv: tp_meter: restrict number of unacked list entries
...
hdlc_ppp: sync per-proto timers before freeing hdlc state
...
KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
...
batman-adv: v: prevent OGM aggregation on disabled hardif
...
bpf: use kvfree() for replaced sysctl write buffer
...
nfsd: reset write verifier on deferred writeback errors
...
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
...
nfsd: release layout stid on setlease failure
...
i2c: core: fix adapter registration race
...
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
...
NFSv4/flexfiles: reject zero filehandle version count
...
block: Avoid mounting the bdev pseudo-filesystem in userspace
...
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
...
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
...
NGINX ngx_http_ssi_module vulnerability
...
NGINX Map directive and Regex matching vulnerability
...
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
Excon: redact additional sensitive/risky headers when following redirects
...
Squid: Memory corruption in cache_digest reply handling
...
Squid: Memory disclosure in FTP gateway
...
CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
...
Chromium: CVE-2026-15905 Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15904 Use after free in Ozone
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15903 Out of bounds read and write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15902 Use after free in Cast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15901 Use after free in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15900 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15899 Use after free in CameraCapture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
...
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
...
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
...
DBI::ProfileData versions before 1.651 for Perl do not limit the path index
...
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
...
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
...
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
...
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
...
ipv4: account for fraggap on the paged allocation path
...
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
...
Chromium: CVE-2026-15776 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15775 Insufficient policy enforcement in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...