32226 matches found
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
...
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName
...
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
...
roxmltree through 0.21.1 Denial of Service via Quadratic Parsing
...
CRL check skipped when OCSP enabled and certificate has no OCSP URL
...
Heap use-after-free on read during bidirectional (D)TLS shutdown
...
(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange
...
Failed X509_verify_cert leaves unverified CA in shared CertManager
...
OCSP stapling v2 multi accepts non-CA chain certificates as issuers
...
Client session cache reference poisoning allows resumption with wrong server
...
Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
...
Client accepts unsolicited RawPublicKey server certificate type
...
NameConstraints not enforced across unconstrained intermediate CA
...
Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
...
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
...
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
...
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
...
Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths
...
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
...
Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint
...
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
...
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
...
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
...
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
...
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
...
iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS
...
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
...
Chromium CVE-2026-87643: Integer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87640: Out of bounds read in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87597: UI misrepresentation in CustomTabs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87576: Uninitialized resource in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87555: Uninitialized resource in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87534: Missing authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87522: Missing authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87520: Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87503: Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87488: Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87483: Incorrect authorization in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87481: Incorrect authorization in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87464: Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87438: Out of bounds write in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87595: Server-side request forgery in Mobile
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87545: Information leak in Mobile
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87518: Observable discrepancy in Safebrowsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87517: Race condition in Mobile
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-85047: Improper input validation in Transactions Platform
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-93387: Improper state validation in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...