221323 matches found
CVE-2026-79656
A flaw was found in Grafana. When a user signs in using generic OAuth, Google, or GitLab single sign-on connectors, Grafana may write the user's OAuth or OpenID Connect OIDC tokens to its server logs in plaintext. This occurs if the identity provider returns an opaque token or if token parsing...
CVE-2026-118338
An use after free flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575826638...
CVE-2026-80789
A flaw was found in the Linux kernel's nvmet-tcp component. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted command with an oversized data length. This can lead to unbounded kernel memory allocation, causing a denial of service DoS due to resource exhaustion...
CVE-2026-80755
A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. This vulnerability occurs because the system does not properly check the size of permission values when processing security policies. A specially crafted SELinux policy could cause the kernel to write data outside o...
CVE-2026-80825
A flaw was found in the mt7925 Wi-Fi driver in the Linux kernel. A remote attacker could exploit this by sending specially crafted network frames through a bridged interface to an mt7925u Access Point AP. This improper handling of network packet headroom can lead to a kernel panic, causing a deni...
CVE-2026-8822
A flaw was found in the vtkDEMReader component of VTK. By processing a specially crafted Digital Elevation Model DEM file in the ReadProfiles function, an attacker can trigger a buffer overflow. This vulnerability leads to memory corruption, resulting in an application crash and a Denial of Servi...
CVE-2026-8824
A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap BMP files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and...
CVE-2026-117988
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2026-9536
A flaw was found in vtk. A heap-based buffer overflow in the vtkWindBladeReader component allows an attacker to cause an application crash and a Denial of Service DoS by supplying a specially crafted .wind file...
CVE-2026-99141
A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local user with access to tracing controls to cause a Denial of Service DoS by triggering a kernel crash. When switching tracers, the kernel leaves trace flags unassigned if the new tracer lacks default flags. I...
CVE-2026-99143
A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service DoS or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event...
CVE-2026-99144
A flaw was found in the Linux kernel's schedext extensible scheduler component. A race condition during the destruction of a user dispatch queue allows a deferred task re-enqueue operation to access memory that has already been freed. A local user can exploit this use-after-free vulnerability to...
CVE-2026-99142
A flaw was found in the Linux kernel's tracing subsystem. In the event filter parser, insufficient boundary checks allow the operator stack to be written past its allocated limit. A local attacker could exploit this vulnerability by submitting a specially crafted trace filter expression, triggeri...
CVE-2026-99145
A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...
CVE-2026-99146
A flaw was found in the Linux kernel's Intel i915 graphics driver. When parsing Display Microcontroller DMC firmware headers, the driver fails to validate the target load address against allowed memory ranges. An attacker capable of supplying a crafted firmware file could exploit this vulnerabili...
CVE-2026-99147
A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS or memory corruption. This issue arises during lock contention when the execution handler drmexec retains a pre-locked object that is about t...
CVE-2026-116794
A flaw was found in russh. When processing signing requests for SSH keys configured to require explicit confirmation, the SSH agent server component fails to invoke the confirmation check and automatically returns success. A local process or remote user with access to the forwarded SSH agent sock...
CVE-2026-99139
A flaw was found in the Linux kernel's Transmission Control Protocol TCP subsystem. A race condition occurs when querying TCP congestion control settings without proper locking, which can allow dynamically allocated memory to be released while still being read. A local attacker can exploit this...
CVE-2026-110747
A flaw was found in jackson-dataformat-protobuf. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Protocol Buffers protobuf message. An integer overflow in length validation allows malformed map entry keys with excessively large declared lengths to bypass size...
CVE-2026-104016
A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...
CVE-2026-75347
A flaw was found in opener. This flaw allows a remote attacker to cause a Denial of Service DoS due to an expired pointer dereference in the EtherNet/IP Common Packet Format CPF handling logic. By sending specially crafted network packets, an attacker can trigger invalid memory access, causing th...
CVE-2026-117987
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component...
CVE-2026-117986
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics component...
CVE-2026-117974
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XML component...
CVE-2026-118351
A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570825067...
CVE-2026-118354
An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936430...
CVE-2026-118348
An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574776938...
CVE-2026-118340
A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936530...
CVE-2026-118329
An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568900535...
CVE-2026-118359
A memory corruption flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573378812...
CVE-2026-118358
A memory corruption flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572191610...
CVE-2026-118357
An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562191732...
CVE-2026-118356
An use after free flaw was found in the WTF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575851252...
CVE-2026-118353
An use after free flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572312175...
CVE-2026-118349
A memory corruption flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572422506...
CVE-2026-118352
A memory corruption flaw was found in the Cache component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569674221...
CVE-2026-118350
An use after free flaw was found in the Turbolev component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567129324...
CVE-2026-118347
An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574911589...
CVE-2026-118343
An improper input validation flaw was found in the ReadingList component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573389782...
CVE-2026-118346
An use after free flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574382050...
CVE-2026-118344
An use after free flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574852698...
CVE-2026-118341
An use after free flaw was found in the Modularization component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574911701...
CVE-2026-118339
An use after free flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567645136...
CVE-2026-118336
An improper input validation flaw was found in the Headless component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572111820...
CVE-2026-118335
An improper input validation flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574606539...
CVE-2026-118334
An use after free flaw was found in the ImageCapture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574027204...
CVE-2026-118331
An improper input validation flaw was found in the FileAPI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572193211...
CVE-2026-118330
An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575090745...