28326 matches found
libssh2 Heap Out-of-Bounds Read via publickey subsystem
...
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
...
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
...
fbdev: modedb: fix a possible UAF in fb_find_mode()
...
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
...
LoongArch: Report dying CPU to RCU in stop_this_cpu()
...
gpio: rockchip: teardown bugs and resource leaks
...
smb: client: fix double-free in SMB2_open() replay
...
MIPS: smp: report dying CPU to RCU in stop_this_cpu()
...
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
...
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
...
KVM: x86: hyper-v: Bound the bank index when querying sparse banks
...
wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
...
crypto: ecc - Fix carry overflow in vli multiplication
...
drivers/base/memory: set mem->altmap after successful device registration
...
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
...
net/mlx5e: xsk: Fix unlocked writing to ICOSQ
...
smb: client: mask server-provided mode to 07777 in modefromsid
...
hwmon: (lm90) Add lock protection to lm90_alert
...
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
...
mm: do file ownership checks with the proper mount idmap
...
Gdk-pixbuf: out-of-bounds read in ico parser
...
Capstone has a NULL Pointer Dereference with 3DNow! opcodes
...
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
...
Librest: weak random number generation in pkce implementation
...
Libssh: libssh: use-after-free via data callbacks on closed channels
...
Libssh: libssh: denial of service via oversized sftp read length
...
Libssh: libssh: denial of service via unchecked proxycommand fork() failure
...
Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
...
Libssh: libssh: denial of service via zero advertised channel packet size
...
Libssh: libssh: denial of service via sftp responses with unknown request ids
...
Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch
...
Libarchive: libarchive: signed integer overflow in archive_write_zip_header
...
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
...
Record ordering based unexpected exit with CNAME or DNAME
...
Potential memory usage beyond configured limits
...
Cache poisoning possible with label count discrepancy, RRSIG, and wildcards
...
Potential wildcard CNAME RPZ policy bypass
...
Unnecessary validation of DNSSEC signed records
...
DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
...
Incorrect acceptance of NSEC3 records
...
Unexpected exit in certain situations with NSEC and NSEC3 both present
...
Infinite loop on invalid input in golang.org/x/text
...
Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)
...
Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
...
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
...
Chromium: CVE-2026-16807 Out of bounds write in Codecs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-16806 Use after free in WebMCP
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-16805 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-16804 Use after free in Input
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...