21711 matches found
cifs: fix memory leak in smb3_fs_context_parse_param error path
...
nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
...
mm/mempool: fix poisoning order>0 pages with HIGHMEM
...
ext4: refresh inline data size before write operations
...
crash: fix crashkernel resource shrink
...
drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
...
ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
...
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
...
Portworx Half-Blind SSRF in kube-controller-manager
...
Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-14174 exists in the wild...
usb: storage: sddr55: Reject out-of-bound new_pba
...
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
...
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
...
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
...
Chromium: CVE-2025-14373 Inappropriate implementation in Toolbar
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-14372 Use after free in Password Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Apache HTTP Server: mod_md (ACME), unintended retry intervals
...
Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
...
c-ares has a Use After Free vulnerability when connection is cleaned up after error
...
urllib3 Streaming API improperly handles highly compressed data
...
urllib3 allows an unbounded number of links in the decompression chain
...
net: stmmac: Correctly handle Rx checksum offload errors
...
f2fs: fix infinite loop in __insert_extent_tree()
...
drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
...
nvme-fc: use lock accessing port_state and rport state
...
smb: client: fix potential UAF in smb2_close_cached_fid()
...
sctp: Prevent TOCTOU out-of-bounds write
...
nvmet-fc: avoid scheduling association deletion twice
...
futex: Don't leak robust_list pointer on exec race
...
Windows Admin Center Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...
NFSD: Fix crash in nfsd4_read_release()
...
btrfs: ensure no dirty metadata is written back for an fs with errors
...
net: bridge: fix use-after-free due to MST port state bypass
...
fbdev: bitblit: bound-check glyph index in bit_putcs*
...
accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
...
fbcon: Set fb_display[i]->mode to NULL when the mode is released
...
amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
...
Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
...
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
...
Bluetooth: hci_event: validate skb length for unknown CC opcode
...
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
...
bpf: Sync pending IRQ work before freeing ring buffer
...
virtio-net: fix received length check in big packets
...
Bluetooth: bcsp: receive data only if registered
...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...