21711 matches found
usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
...
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
...
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
...
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
...
sch_hfsc: make hfsc_qlen_notify() idempotent
...
filelock has TOCTOU race condition that allows symlink attacks during lock file creation
...
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
...
Chromium: CVE-2025-14766 Use after free in WebGPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-14765 Out of bounds read and write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
...
usb: gadget: f_eem: Fix memory leak in eem_unwrap
...
drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
...
usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
...
can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
...
most: usb: fix double free on late probe failure
...
net: atlantic: fix fragment overflow handling in RX path
...
libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
...
platform/x86: intel: punit_ipc: fix memory corruption
...
usb: storage: Fix memory leak in USB bulk transport
...
smb: client: fix memory leak in cifs_construct_tcon()
...
drm/amd/display: Check NULL before accessing
...
can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
...
libceph: replace BUG_ON with bounds check for map->max_osd
...
libceph: fix potential use-after-free in have_mon_and_osd_map()
...
net/sched: Always pass notifications when child class becomes empty
...
usb: gadget: udc: fix use-after-free in usb_gadget_state_work
...
Azure Cosmos DB Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network...
Azure Container Apps Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Azure Container Apps allows an unauthorized attacker to execute code over a network...
Office Out-of-Box Experience Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network...
Microsoft Purview eDiscovery Remote Code Execution Vulnerability
'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...
Custom Question Answering Elevation of Privilege Vulnerability
...
Potential non-constant time compiled code with Clang LLVM
...
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
...
Input: pegasus-notetaker - fix potential out-of-bounds access
...
drm/tegra: Add call to put_pid()
...
pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
...
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
...
mtdchar: fix integer overflow in read/write ioctls
...
staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
...
netfilter: nft_ct: add seqadj extension for natted connections
...
mptcp: Fix proto fallback detection with BPF
...
binfmt_misc: restore write access before closing files opened by open_exec()
...
KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
...
nvme: fix admin request_queue lifetime
...
pmdomain: arm: scmi: Fix genpd leak on provider registration failure
...
timers: Fix NULL function pointer race in timer_shutdown_sync()
...
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
...
scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
...