24590 matches found
Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge for Android Information Disclosure Vulnerability
Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Chromium: CVE-2026-13954 Insufficient policy enforcement in XML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Tarfile.extract() doesn't fully respect filter parameter
...
MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error
...
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
...
Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
...
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
...
Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
...
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
...
Chromium: CVE-2026-14090 Out of bounds read in CameraCapture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure OpenAI Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure OpenAI allows an authorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network...
ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
...
drm/i915/gem: Fix phys BO pread/pwrite with offset
...
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
...
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
...
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
...
hsr: Remove WARN_ONCE() in hsr_addr_is_self().
...
drm/virtio: Fix driver removal with disabled KMS
...
net: bonding: fix NULL pointer dereference in bond_do_ioctl()
...
debugobjects: Do not fill_pool() if pi_blocked_on
...
net: rds: clear i_sends on setup unwind
...
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
...
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
...
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
...
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
...
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
...
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
...
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
...
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
...
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
...
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
...
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
...
agp/amd64: Fix broken error propagation in agp_amd64_probe()
...
Global Buffer Overflow in GNU gzip
...