32226 matches found
coredump: hold RCU while releasing parked threads
...
Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File
...
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
...
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)
...
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
...
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
...
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
...
Forge: AES-GCM authentication bypass via unvalidated tagLength option
...
Forge: Denial of service in TLS record processing via call stack exhaustion
...
Forge: Regular expression denial of service in PEM decoding (pem.decode)
...
Forge: ASN.1 OID first arc truncation in asn1.oidToDer
...
Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
...
pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding
...
Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing
...
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets
...
HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values
...
Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
...
Gcc: integer wrap in `std
...
Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
...
Gcc: stack overflow in std::bitset on libstdc++
...
Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
...
Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
...
Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
...
Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
...
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
...
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
...
Forge: TLS client crash when the server sends no certificate
...
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
...
Forge: Certificate signature verified with the issuer's RSA signature scheme
...
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
...
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
...
gettext: Directory traversal via the LANGUAGE environment variable
...
Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
...
AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page
...
Chromium: CVE-2026-118358 Memory corruption in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118336 Improper input validation in Headless
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118356 Use after free in WTF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118328 Improper input validation in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118310 Improper input validation in Views
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118315 Improper input validation in SVG
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118304 Improper input validation in SVG
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118311 Memory corruption in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118353 Use after free in Paint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118348 Improper input validation in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118329 Improper input validation in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118320 Memory corruption in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118319 Memory corruption in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118307 Use after free in Paint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118305 Memory corruption in Turbolev
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-118318 Improper access control in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...