23109 matches found
Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
...
Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
...
Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()
...
Rsync < 3.4.3 Integer Overflow Information Disclosure
...
Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls
...
net: qrtr: ns: Limit the maximum server registration per node
...
lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
...
Microsoft Defender Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network...
Microsoft Defender Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to elevate privileges locally...
Windows BitLocker Security Feature Bypass Vulnerability
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...
Microsoft Defender Denial of Service Vulnerability
...
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
GNU Binutils objdump bucomm.c display_info memory leak
...
Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network...
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
...
Pallets Click contains a command injection via Unsanitized Filename "click.edit()"
...
LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects
...
etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
...
Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
...
ptrace: slightly saner 'get_dumpable()' logic
...
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
...
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
...
NGINX ngx_http_rewrite_module vulnerability
...
NGINX ngx_http_charset_module vulnerability
...
NGINX ngx_http_ssl_module vulnerability
...
NGINX ngx_quic_module vulnerability
...
PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion
...
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
...
PostgreSQL refint allows stack buffer overflow and SQL injection
...
PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
...
PostgreSQL timeofday() can disclose portions of server memory
...
PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice
...
PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
...
PostgreSQL server undersizes allocations, via integer wraparound
...
PostgreSQL discloses MD5-hashed passwords via covert timing channel
...
libyang: lyb_read_string() integer overflow → heap buffer overflow
...
Chromium: CVE-2026-8587 Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8585 Inappropriate implementation in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8584 Inappropriate implementation in Views
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8583 Insufficient policy enforcement in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8582 Object lifecycle issue in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8581 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8580 Use after free in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8578 Out of bounds read in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8577 Integer overflow in Fonts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8576 Inappropriate implementation in CORS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8575 Use after free in UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-8574 Use after free in Core
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...