HTTP/2 upload Use-After-Free

...

ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

...

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

...

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()

...

OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions

...

OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter

...

OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute

...

OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader

...

OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter

...

OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers

...

OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES

...

OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer

...

Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

...

Dpdk: dpdk: heap out-of-bounds read/write in gso header copy

...

Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

...

Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

...

libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path

...

Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup

...

Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions

...

Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service

...

Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds

...

libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL

...

libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string

...

AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

...

CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip

...

CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

...

OpenPrinting CUPS: root-side banner file disclosure

...

CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)

...

Chromium CVE-2026-106256: Information leak

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106255: Race condition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106281: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106280: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106266: Confused deputy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106252: Incorrect comparison

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106250: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106247: Buffer overflow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106244: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106248: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106241: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106270: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106276: UI misrepresentation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106271: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106264: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106212: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106217: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106237: Information leak

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106232: UI misrepresentation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106229: UI misrepresentation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106230: Incorrect reference resolution

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106226: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...