23108 matches found
Chromium: CVE-2026-5863 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5862 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5861 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5860 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5859 Integer overflow in WebML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5858 Heap buffer overflow in WebML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
apparmor: fix race between freeing data and fs accessing it
...
apparmor: fix race on rawdata dereference
...
apparmor: fix differential encoding verification
...
apparmor: Fix double free of ns_name in aa_replace_profiles()
...
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
...
apparmor: fix side-effect bug in match_char() macro usage
...
apparmor: fix: limit the number of levels of policy namespaces
...
apparmor: replace recursive profile removal with iterative approach
...
apparmor: fix memory leak in verify_header
...
Vim Ex command injection in Vims NetBeans integration
...
Sleuth Kit tsk_recover Path Traversal
...
Sleuth Kit APFS Keybag Parser Out-of-Bounds Read
...
Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read
...
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
...
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
...
NULL Pointer Dereference When Processing a Delta CRL
...
Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
...
Potential Use-after-free in DANE Client Code
...
Heap Buffer Overflow in Hexadecimal Conversion
...
CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`
...
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer
...
Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon
...
Path traversal issue with zip.vim in Vim
...
Vim modeline bypass via various options affects Vim < 9.2.0276
...
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
...
Util-linux: util-linux: access control bypass due to improper hostname canonicalization
...
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
...
netfilter: conntrack: add missing netlink policy validations
...
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
...
Libssh: libssh: denial of service due to malformed sftp message
...
util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup
...
drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
...
mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
...
OpenPrinting CUPS: Local print admin token disclosure using temporary printers
...
OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup
...
OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)
...
OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
...
OpenPrinting CUPS: Heap overflow in `get_options()`
...
XZ Utils: Buffer overflow in lzma_index_append()
...
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).
...
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.
...
In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.
...