28400 matches found
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
...
Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
...
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
...
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
...
RabbitMQ: Trust-store whitelist by Issuer+Serial only
...
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
...
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
...
Axios: Header Injection via Inherited headers After Minimal Interceptor
...
sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
...
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
...
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
...
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
...
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
...
PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
...
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
...
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
...
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
...
PyJWT accepts public JWK containers as HMAC secrets
...
PyJWT BOM Bypass
...
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
...
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
...
roxmltree through 0.21.1 Denial of Service via Quadratic Parsing
...
(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange
...
Failed X509_verify_cert leaves unverified CA in shared CertManager
...
OCSP stapling v2 multi accepts non-CA chain certificates as issuers
...
Client accepts unsolicited RawPublicKey server certificate type
...
NameConstraints not enforced across unconstrained intermediate CA
...
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
...
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
...
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
...
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
...
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
...
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
...
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
...
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
...
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
...
Chromium CVE-2026-87643: Integer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87640: Out of bounds read in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87597: UI misrepresentation in CustomTabs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87576: Uninitialized resource in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87555: Uninitialized resource in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87534: Missing authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87522: Missing authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87520: Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87503: Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87488: Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87483: Incorrect authorization in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87481: Incorrect authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...