24507 matches found
Chromium: CVE-2026-9874 Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-9873 Use after free in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
...
xfrm: ah: account for ESN high bits in async callbacks
...
eventfs: Hold eventfs_mutex and SRCU when remount walks events
...
isofs: validate block number from NFS file handle in isofs_export_iget
...
net: libwx: fix VF illegal register access
...
usb: usblp: fix heap leak in IEEE 1284 device ID via short response
...
drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
...
batman-adv: reject new tp_meter sessions during teardown
...
RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
...
libceph: Fix slab-out-of-bounds access in auth message processing
...
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
...
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
...
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
...
usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
...
Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
...
fanotify: fix false positive on permission events
...
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
...
LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
...
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
...
RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
...
wifi: b43: enforce bounds check on firmware key index in b43_rx()
...
RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
...
batman-adv: bla: only purge non-released claims
...
wifi: mac80211: remove station if connection prep fails
...
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
...
drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
...
ip6_gre: Use cached t->net in ip6erspan_changelink().
...
wifi: mac80211: drop stray 'static' from fast-RX rx_result
...
batman-adv: stop caching unowned originator pointers in BAT IV
...
RDMA/rxe: Reject unknown opcodes before ICRC processing
...
drm/amdgpu: Add bounds checking to ib_{get,set}_value
...
ipmi:si: Return state to normal if message allocation fails
...
Bluetooth: virtio_bt: clamp rx length before skb_put
...
RDMA/mana: Validate rx_hash_key_len
...
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
...
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
...
mptcp: pm: ADD_ADDR rtx: free sk if last
...
btrfs: fix double free in create_space_info() error path
...
wifi: mt76: mt7921: fix a potential clc buffer length underflow
...
smb/client: fix out-of-bounds read in smb2_compound_op()
...
ipmi: Add limits to event and receive message requests
...
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
...
tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
...
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
...
media: rc: xbox_remote: heed DMA restrictions
...