23105 matches found
net: sock: fix hardened usercopy panic in sock_recv_errqueue
...
net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
...
dmaengine: idxd: fix device leaks on compat bind and unbind
...
net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
...
KEYS: trusted: Fix a memory leak in tpm2_load_cmd
...
HID: uclogic: Correct devm device reference for hidinput input_dev name
...
nats-server websockets are vulnerable to pre-auth memory DoS
...
Vitess users with backup storage access can write to arbitrary file paths on restore
...
Vitess users with backup storage access can gain unauthorized access to production deployment environments
...
Chromium: CVE-2026-3063 Inappropriate implementation in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3062 Out of bounds read and write in Tint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3061 Out of bounds read in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Malformed Valkey Cluster bus message can lead to Remote DoS
...
Valkey Affected by RESP Protocol Injection via Lua error_reply
...
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
...
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
...
This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.
...
TFTP Path Traversal
...
Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse
...
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
...
sched/mmcid: Don't assume CID is CPU owned on mode switch
...
erofs: fix UAF issue for file-backed mounts w/ directio option
...
scsi: qla2xxx: Free sp in error path to fix system crash
...
nilfs2: Fix potential block overflow that cause system hang
...
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
...
scsi: qla2xxx: Validate sp before freeing associated memory
...
PCI: endpoint: Avoid creating sub-groups asynchronously
...
wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
...
scsi: qla2xxx: Delay module unload while fabric scan in progress
...
xfs: fix UAF in xchk_btree_check_block_owner
...
bus: fsl-mc: fix use-after-free in driver_override_show()
...
smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
...
hfs: ensure sb->s_fs_info is always cleaned up
...
crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
...
crypto: virtio - Add spinlock protection with virtqueue notification
...
Limited path traversal when installing wheel archives
...
Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure
...
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
...
bonding: annotate data-races around slave->last_rx
...
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
...
Chromium: CVE-2026-2650 Heap buffer overflow in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2649 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2648 Heap buffer overflow in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Teams Information Disclosure Vulnerability
Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network...
Chromium: CVE-2026-2322 Heap buffer overflow in Codecs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2319 Race in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2314 Heap buffer overflow in Codecs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2441 Use after free in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-2441 exists in the wild...
Chromium: CVE-2026-2323 Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...