28424 matches found
wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
...
Bluetooth: mgmt: fix UAF in pair command cancellation
...
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
...
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
...
RDMA/siw: Fix endpoint/socket association handling
...
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
...
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
...
fou: Fix use-after-free in fou_create()
...
forcedeth: fix UAF of txrx_stats in nv_remove
...
Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
...
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
...
netfilter: nft_lookup: fix catchall element handling with inverted lookups
...
net: sxgbe: free TX rings on RX allocation failure
...
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
...
can: peak_usb: add bounds check for USB channel index
...
md/raid1: fix writes_pending and barrier reference leaks on write failures
...
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
...
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
...
sockmap: Fix use-after-free in udp_bpf_recvmsg()
...
sctp: add INIT verification after cookie unpacking
...
sctp: fix addr_wq_timer race in sctp_free_addr_wq()
...
ntfs: skip extent mft records in writeback to prevent deadlock
...
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount
...
wifi: mac80211: validate extension-frame layout before RX
...
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
...
drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
...
tarfile extraction filter bypass allows creation of directories outside the destination
...
BuildKit: Malicious client can bypass destination directory validation on local sources upload
...
BuildKit: Possible runtime DoS via unbounded group parsing
...
BuildKit: Custom frontend could bypass Seccomp/AppArmor
...
Tar extraction in moby/go-archive can write outside the destination directory via link following
...
net: ipv6: clear suppressed fib6 rule result
...
net/sched: cls_route: fix fastmap use-after-free on filter
...
packet: use consistent hard_header_len in non-ring send paths
...
vhost: reset the vring metadata cache on vring reconfiguration
...
KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping
...
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
...
Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch
...
Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1
...
stringprep.map_table_b2() deviates from RFC 3454 Table B.2
...
`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching
...
Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder
...
Chromium: CVE-2026-76047 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76045 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76044 Race condition in USB
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76043 Incorrect calculation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76042 Use of uninitialized resource in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76041 Information leak in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76040 Use after free in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76038 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...