CVE-2026-95340

An incorrect authorization flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553268567...

CVE-2026-95332

An use of uninitialized variable flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/546639650...

CVE-2026-95312

An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/547832510...

CVE-2026-95302

An incorrect authorization flaw was found in the WebAPKs component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502242455...

CVE-2026-95291

An ui misrepresentation flaw was found in the SecurityIndicators component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/543471693...

CVE-2026-95290

A missing authorization flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536161355...

CVE-2026-95372

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/534997484...

CVE-2026-95373

An use after free flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553130481...

CVE-2026-95354

An use after free flaw was found in the Verifier component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524582798...

CVE-2026-95345

An use after free flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/516404074...

CVE-2026-95338

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556535630...

CVE-2026-95334

An incorrect reference resolution flaw was found in the WebProtect component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513403696...

CVE-2026-95315

An use after free flaw was found in the Aura component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517661385...

CVE-2026-95333

An use after free flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559682346...

CVE-2026-95306

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/560536735...

CVE-2026-79657

A flaw was found in NLTK. This vulnerability allows a remote attacker to achieve arbitrary code execution by supplying a specially crafted model or tokenizer artifact for the application to process. The issue occurs because the deserialization allowlist mechanism permits entire software namespace...

CVE-2026-73256

A flaw was found in Mongoose. A remote, unauthenticated attacker can achieve unauthorized access or bypass security controls through HTTP request smuggling. Due to an error in protocol version validation, Mongoose fails to identify HTTP/1.0 requests and incorrectly processes chunked transfer...

CVE-2026-73257

A flaw was found in Mongoose. When processing incoming requests containing both Content-Length and Transfer-Encoding headers, the server accepts both headers instead of rejecting the malformed request. In environments where an upstream proxy processes request boundaries differently, a remote,...

CVE-2026-73251

A flaw was found in Mongoose. When configured with a Certificate Authority CA bundle, the built-in Transport Layer Security TLS implementation matches server certificates by name without verifying their cryptographic signatures. A remote network attacker can exploit this vulnerability by presenti...

CVE-2026-97912

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When the mapping of Static Random-Access Memory SRAM fails during device initialization, the driver fails to reset the memory size to zero. Consequently, a local user can submit processing jobs that access physical address zer...

CVE-2026-97911

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. A local user can submit a job configured with a zero Static Random-Access Memory SRAM size while still performing SRAM operations in the command stream. Because the driver skips setting the region base register when the size i...

CVE-2026-97910

A flaw was found in the Linux kernel. The Spreadtrum audio driver fails to validate buffer size parameters against fixed physical memory allocations during compressed audio stream operations. A local attacker with access to the audio device can supply oversized buffer configurations to trigger an...

CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-97472

A flaw was found in the Linux kernel's IPv6 networking subsystem. An attacker on the local network can cause a denial of service to IPv6 temporary address generation by sending router advertisements that temporarily deprecate and then restore a network prefix. Because the kernel improperly...

CVE-2026-95352

An incorrect authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513791872...

CVE-2026-97455

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface Component Architecture ACPICA. When terminating a control method, references to method local variables and arguments are not properly cleared, leading to a use-after-free condition when internal execution state...

CVE-2026-95353

An use after free flaw was found in the Bindings component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522061704...

CVE-2026-95301

A missing authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540265100...

CVE-2026-95348

An use after free flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554558320...

CVE-2026-95351

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562242429...

CVE-2026-95311

A free of non-heap memory flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553123003...

CVE-2026-95277

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553136141...

CVE-2026-97909

A flaw was found in the Linux kernel's audio subsystem. The STI audio driver registers a shared interrupt request IRQ before initializing its internal locking mechanism. A local attacker capable of triggering driver initialization may cause an interrupt to be handled while the lock remains...

CVE-2026-97908

A flaw was found in the Linux kernel's Qualcomm SMD Bluetooth driver. An improper cleanup sequence frees the core Bluetooth device structure before shutting down communication endpoints during device removal or initialization errors. If incoming data arrives during this teardown window, the drive...

CVE-2026-97907

A flaw was found in the Linux kernel's Realtek Bluetooth driver. When processing firmware images on hardware where the chip key identifier is zero, the driver incorrectly manages loop control and evaluates an uninitialized or stale return code. A local user capable of providing firmware or...

CVE-2026-97906

A flaw was found in the Linux kernel. A local attacker with the ability to supply a crafted initial RAM disk initrd can trigger an integer overflow during boot configuration parsing. This flaw allows the attacker to bypass memory bounds checks, causing the system to read unmapped memory and crash...

CVE-2026-67406

A flaw was found in rabbitmq-server. When the Shovel plugin worker process crashes due to network or connection failures, it fails to sanitize its internal state before logging error reports. As a result, sensitive connection details and unencrypted credentials, including plaintext passwords, are...

CVE-2026-80864

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. A local, unprivileged user could exploit a race condition during a queue pair modification operation. This could lead to a use-after-free vulnerability, allowing the attacker ...

CVE-2026-80775

A flaw was found in the Linux kernel. A race condition exists in the futexhashallocate function, specifically during the initial allocation of mm-futex.phash.ref. This vulnerability can be triggered in scenarios involving nested vfork calls, where a parent and grandchild process might concurrentl...

CVE-2026-68911

A flaw was found in nicotine-plus. A remote attacker can trigger a Denial of Service DoS by sending specially crafted, zlib-compressed peer messages containing a decompression bomb. When the recipient client decompresses the message, it exhausts available operating system memory, causing the...

CVE-2026-97905

A flaw was found in the Linux kernel's CPU frequency scaling cpufreq subsystem. When creating a frequency policy, the kernel exposes system control files sysfs attributes before the CPU mask memory is zero-initialized. A local user could exploit this race condition by accessing these sysfs...

CVE-2026-102635

A flaw was found in ImageMagick. An attacker could exploit this vulnerability by supplying a specially crafted GIF file to be processed by the application. During processing, the GIF decoder reads uninitialized heap memory and writes it into the image metadata, resulting in sensitive information...

CVE-2026-97904

A flaw was found in the Linux kernel's CPU frequency scaling cpufreq subsystem. A race condition occurs because an internal synchronization lock is initialized only after its system filesystem sysfs entries are made accessible. A local user accessing these sysfs attributes during policy allocatio...

CVE-2026-97902

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by initiating nested filesystem freeze and thaw operations. An incorrect error code returned during nested thaw requests causes the kernel to retain an elevated freeze counter on the underlying block device...

CVE-2026-97900

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user could exploit this flaw to cause a Denial of Service DoS by triggering an infinite loop during graphics buffer locking operations. When processing locking requests that include an empty object list, the...

CVE-2026-97899

A flaw was found in the Linux kernel's Intel i915 graphics driver. When handling performance configuration queries, the driver fails to properly free previously allocated memory if a memory reallocation request fails. A local user could exploit this flaw during low-memory conditions to trigger a...

CVE-2026-35191

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service DoS attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to...

CVE-2026-35189

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by presenting a specially crafted certificate during a Transport Layer Security TLS handshake. When OpenSSL processes and caches certificate extensions containing numerous Certificate Revocation List CRL distribution...

CVE-2026-97616

A flaw was found in the Linux kernel's traffic control action subsystem. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. When processing a batched request to replace traffic control actions, an initialization failure causes the cleanup routine to abort...

CVE-2026-97446

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface component. When the system processes a malformed ACPI package provided by firmware with an unresolvable reference, the kernel dereferences a NULL pointer without prior validation. This issue leads to a kernel...