21727 matches found
iommu/mediatek: Fix crash on isr after kexec()
...
net-imap rubygem vulnerable to possible DoS by memory exhaustion
...
Timing Side-Channel in PSK Binder Verification
...
DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension
...
TLS 1.2 Client Can Downgrade Digest Used
...
Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
...
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
...
Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
...
Constant Time Issue with Xtensa-based ESP32 and X22519
...
Forward Secrecy Violation in WolfSSL TLS 1.3
...
ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
...
Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
...
f2fs: zone: fix to avoid inconsistence in between SIT and SSA
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libvirt: information disclosure via world-readable vm snapshots
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
...
Denial of service vulnerability in HAProxy mjson library
...
Grub2: missing unregister call for normal_exit command may lead to use-after-free
...
Grub2: grub2: out-of-bounds write via malicious usb device
...
Grub2: missing unregister call for normal commands may lead to use-after-free
...
Grub2: missing unregister call for gettext command may lead to use-after-free
...
Grub2: use-after-free in net_set_vlan
...
Grub2: use-after-free in grub_file_close()
...
HID: nintendo: avoid bluetooth suspend/resume stalls
...
drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
...
Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
...
KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
...
ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock
...
KubeVirt Vulnerable to Arbitrary Host File Read and Write
...
Azure Application Gateway Elevation of Privilege Vulnerability
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
Azure Application Gateway Elevation of Privilege Vulnerability
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
Azure Bastion Elevation of Privilege Vulnerability
...
Microsoft Defender Portal Spoofing Vulnerability
...
Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
Azure Monitor Elevation of Privilege Vulnerability
...
ax25: fix incorrect dev_tracker usage
...
tty: n_gsm: fix deadlock and link starvation in outgoing data path
...
Rsync: Out of bounds array access via negative index
...
mptcp: do not queue data on closed subflows
...
mruby array.c sort_cmp use after free
...
bpf: fix potential 32-bit overflow when accessing ARRAY map element
...
Bluetooth: When HCI work queue is drained, only queue chained work
...
net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null
...
mptcp: move subflow cleanup in mptcp_destroy_common()
...
Chromium: CVE-2025-13224 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-13223 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-13223 exists in the wild...