221804 matches found
CVE-2026-97478
A flaw was found in the Linux kernel's ACRN hypervisor driver. A race condition during interrupt file descriptor irqfd shutdown can lead to a use-after-free memory error when an irqfd is deassigned while event notification cleanup is concurrently processed. A local attacker could exploit this...
CVE-2026-102823
A flaw was found in russh, a Secure Shell SSH client and server library. When communicating with a client, a malicious SSH server can send channel lifecycle events referencing unverified, unopened, or closed channel identifiers. Because the library forwards these events to client handlers without...
CVE-2026-102831
A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...
CVE-2026-12345
A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...
CVE-2026-75926
A flaw was found in Hugo. This vulnerability enables arbitrary command execution by bypassing security restrictions designed to confine asset-processing tools. Because TailwindCSS is granted permission to create child processes by default, an attacker providing a malicious theme, module, or...
CVE-2026-95316
An unchecked return value flaw was found in the Performance component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/552023752...
CVE-2026-97476
A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. An unprivileged local attacker can exploit this vulnerability to cause information disclosure across isolated network environments. Because socket inspection handlers do not filter connection and socket lists by the...
CVE-2026-97918
A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...
CVE-2026-97917
A flaw was found in the Linux kernel's Intel Versatile Processing Unit ivpu accelerator driver. A local user could trigger an out-of-bounds memory access by supplying an address range that extends beyond the allocated buffer object boundaries. This issue can lead to memory corruption or a system...
CVE-2026-95359
An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513162143...
CVE-2026-95297
A missing authorization flaw was found in the Contextual Tasks component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501648493...
CVE-2026-95347
An use after free flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550181232...
CVE-2026-95317
An incorrect authorization flaw was found in the MediaCapture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514487499...
CVE-2026-95319
An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523765972...
CVE-2026-95324
An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537857253...
CVE-2026-95298
An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520516206...
CVE-2026-95286
A type confusion flaw was found in the Bindings component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/557523002...
CVE-2026-76835
A flaw was found in oauth2-proxy. When configured in reverse-proxy mode without explicit trusted proxy settings, the application defaults to treating all incoming network traffic as originating from trusted proxies. A remote, unauthenticated attacker can exploit this issue by sending a request wi...
CVE-2026-97473
A flaw was found in the Linux kernel's Intel Running Average Power Limit RAPL power capping driver. When CPU package or die identification fails during processor initialization, the driver fails to release allocated memory on the error return path. Over time, repeated addition failures can cause...
CVE-2026-95278
A missing authorization flaw was found in the WakeLock component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497344014...
CVE-2026-95308
An integer overflow flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513714849...
CVE-2026-97475
A flaw was found in the Linux kernel's Tegra SOCTHERM driver. When the driver is removed, registered cooling devices are not unregistered from the thermal framework, leaving stale references to memory that has already been released. This leads to a use-after-free vulnerability, where the system...
CVE-2026-97916
A flaw was found in the Linux kernel's Intel VPU ivpu driver. A compromised device firmware can cause a Denial of Service DoS by modifying log buffer metadata in shared memory. Because the host driver re-reads buffer size fields from shared memory after validating them, the firmware can alter the...
CVE-2026-95371
A missing authorization flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520504291...
CVE-2026-95366
An use of released resource flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497204165...
CVE-2026-95364
An improper input validation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553271219...
CVE-2026-95287
A missing authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/495529018...
CVE-2026-95344
A race condition flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/548611433...
CVE-2026-95285
A missing authorization flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497094708...
CVE-2026-95275
An incorrect reference resolution flaw was found in the MediaStream component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/542926849...
CVE-2026-95365
A type confusion flaw was found in the IndexedDB component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/558764482...
CVE-2026-95356
An use after free flaw was found in the WindowDialog component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/560439699...
CVE-2026-95355
An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/508462481...
CVE-2026-95343
An use after free flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559815527...
CVE-2026-95335
An use after free flaw was found in the HID component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555299641...
CVE-2026-95325
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536648933...
CVE-2026-95322
An out of bounds write flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576992...
CVE-2026-95299
An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561997427...
CVE-2026-95304
An out of bounds write flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/560536731...
CVE-2026-95283
A buffer overflow flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/543141419...
CVE-2026-95293
An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550953039...
CVE-2026-95282
An use after free flaw was found in the Platform component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553129513...
CVE-2026-97915
A flaw was found in the Linux kernel's Intel Versatile Processing Unit accel/ivpu driver. The driver fails to verify that firmware-supplied log names are null-terminated before printing them. This issue causes an out-of-bounds memory read that can leak adjacent data from shared memory buffers int...
CVE-2026-97914
A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When scheduler initialization fails during a job open operation, the driver returns an incorrect positive status code instead of a standard negative error number. A local user can trigger this issue by opening an accelerator j...
CVE-2026-97913
A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. This vulnerability can lead to a Denial of Service DoS through device timeouts or potential out-of-bounds memory access. A local user could exploit this issue by submitting a crafted command stream that lacks a required...
CVE-2026-97474
A flaw was found in the Linux kernel's Intel Wi-Fi driver iwlwifi. This vulnerability can lead to a Denial of Service DoS when a wireless network interface encounters a firmware error during connection reconfiguration. Because the driver fails to immediately discard pending asynchronous...
CVE-2026-95382
An improper input validation flaw was found in the Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497212105...
CVE-2026-95375
An incorrect authorization flaw was found in the BrowserTag component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502179319...