21621 matches found
Chromium: CVE-2026-12017 Insufficient validation of untrusted input Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12016 Insufficient validation of untrusted input DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12015 Use after free Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12014 Use after free Cast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12013 Use after free Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12012 Use after free Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12011 Use after free WebMIDI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12010 Heap buffer overflow GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12009 Insufficient validation of untrusted input Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12008 Use after free DigitalCredentials
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12007 Use after free Core
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Heap Buffer Over-read in ASN.1 Content Parsing
...
NULL Pointer Dereference in CRMF EncryptedValue Decryption
...
Possible NULL Dereference in Password-Based CMS Decryption
...
Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
...
Out-of-Bounds Read in CMS Password-Based Decryption
...
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
...
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
...
CMS AuthEnvelopedData Processing May Accept Forged Messages
...
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
...
Heap Use-After-Free in the PKCS7_verify() Function
...
AES-OCB IV Ignored on EVP_Cipher() Path
...
Vim: Arbitrary Code Execution via Python Omni-Completion
...
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
...
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
...
Vim: Out-of-bounds Read in Terminal Screen Snapshot
...
Vim: Arbitrary Code Execution via Python Omni-Completion
...
Insufficient verification that responses belong to a query
...
SQLite before 3.53.2 Memory Corruption in FTS5 Extension
...
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
...
lldpd: Heap OOB Read in VLAN Decapsulation memmove
...
tap: free page on error paths in tap_get_user_xdp()
...
net: gro: don't merge zcopy skbs
...
net/sched: act_ct: Only release RCU read lock after ct_ft
...
tun: free page on build_skb failure in tun_xdp_one()
...
tun: free page on short-frame rejection in tun_xdp_one()
...
Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service
...
isofs: validate Rock Ridge CE continuation extent against volume size
...
hfsplus: fix held lock freed on hfsplus_fill_super()
...
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
...
net: txgbe: fix RTNL assertion warning when remove module
...
flow_dissector: do not dissect PPPoE PFC frames
...
spi: s3c64xx: fix NULL-deref on driver unbind
...
clk: microchip: mpfs-ccc: fix out of bounds access during output registration
...
crypto: caam - guard HMAC key hex dumps in hash_digest_key
...
spi: topcliff-pch: fix use-after-free on unbind
...
media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
...
io-wq: check that the predecessor is hashed in io_wq_remove_pending()
...
lib: test_hmm: evict device pages on file close to avoid use-after-free
...
mtd: docg3: fix use-after-free in docg3_release()
...