21701 matches found
Chromium: CVE-2026-7358 Use after free in Animation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7359 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7360 Insufficient validation of untrusted input in Compositing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7333 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7343 Use after free in Views
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7344 Use after free in Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-7363 Use after free in Canvas
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Apache Thrift: Node.js skip() recursion
...
Apache Thrift: Swift Compact Protocol integer overflow
...
Apache Thrift: Java TSSLTransportFactory hostname verification
...
Apache Thrift: Go TFramedTransport uint32 overflow
...
Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
...
pip self-update functionality can import newly installed modules after wheel installation
...
net: openvswitch: Avoid releasing netdev before teardown completes
...
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
...
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
...
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
...
Libsoup: libsoup: http request smuggling via duplicate content-length headers
...
Emacs: emacs: memory corruption vulnerability when processing svg css
...
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.
...
mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
...
net: macb: Use dev_consume_skb_any() to free TX SKBs
...
wifi: brcmsmac: Fix dma_free_coherent() size
...
EDAC/mc: Fix error path ordering in edac_mc_alloc()
...
Chromium: CVE-2026-6920 Out of bounds read in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
...
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
...
ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
...
NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
...
xfrm: clear trailing padding in build_polexpire()
...
af_unix: read UNIX_DIAG_VFS data under unix_state_lock
...
batman-adv: reject oversized global TT response buffers
...
openvswitch: validate MPLS set/set_masked payload length
...
HID: alps: fix NULL pointer dereference in alps_raw_event()
...
netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
...
bridge: br_nd_send: linearize skb before parsing ND options
...
rxrpc: fix reference count leak in rxrpc_server_keyring()
...
media: as102: fix to not free memory after the device is registered in as102_usb_probe()
...
net: sched: act_csum: validate nested VLAN headers
...
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
...
netfilter: xt_multiport: validate range encoding in checkentry
...
PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
...
openvswitch: defer tunnel netdev_put to RCU release
...
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
...
KVM: x86: Use scratch field in MMIO fragment to hold small write values
...
net: stmmac: fix integer underflow in chain mode
...
rxrpc: only handle RESPONSE during service challenge
...
net/sched: sch_netem: fix out-of-bounds access in packet corruption
...
mptcp: fix slab-use-after-free in __inet_lookup_established
...
netfilter: ip6t_eui64: reject invalid MAC header for all packets
...