214703 matches found
CVE-2026-92019
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...
CVE-2026-92018
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Core & HTML component...
CVE-2026-19667
A flaw was found in bind9's named component. A remote attacker, by sending a specially crafted DNS negative answer of exactly 65536 bytes from an authoritative server, can cause a 16-bit length truncation. This results in a zero-byte negative cache entry. When named attempts to read this invalid...
CVE-2026-81176
A flaw was found in the Svelte devalue library. An attacker can provide a specially crafted, untrusted payload to the devalue.parse function. This malformed input, specifically out-of-bounds indices, can cause the parser to perform quadratic work, leading to a denial of service DoS in application...
CVE-2026-84445
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...
CVE-2026-92017
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Service Workers component...
CVE-2026-92016
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Disability Access APIs component...
CVE-2026-92014
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics component...
CVE-2026-92013
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2026-92010
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2026-92012
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2026-92011
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2026-69147
A flaw was found in vLLM, an inference and serving engine for large language models. An attacker can exploit this by submitting specially crafted video requests that force the use of the PyNvVideoCodec GPU decoder. This bypasses the engine's static GPU memory reservation, allowing the attacker to...
CVE-2026-19662
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
CVE-2026-59944
A flaw was found in Composer, a dependency manager for PHP. A malicious or compromised dependency can bypass existing security measures designed to prevent unauthorized binary path execution. This can occur when Composer processes untrusted cached data or older build artifacts, allowing it to...
CVE-2026-85732
A flaw was found in oras-go, a Go library for managing OCI artifacts. This vulnerability allows a remote attacker to perform blind Server-Side Request Forgery SSRF against internal services by providing a specially crafted Link header URL during pagination operations. Although the response body i...
CVE-2026-92005
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Web Codecs component...
CVE-2026-85731
A flaw was found in oras-go, a Go library for managing OCI Open Container Initiative artifacts. A remote attacker can exploit a symlink-chain bypass vulnerability during tar extraction of OCI layers. This allows a malicious archive to create or overwrite any file writable by the process outside t...
CVE-2026-57173
A flaw was found in vLLM, an inference and serving engine for large language models. An unauthenticated client can exploit this by submitting a small, compressed audio input that expands into a very large memory allocation. This bypasses existing duration guards, leading to an out-of-memory...
CVE-2026-54168
A flaw was found in Pipelines-as-Code. A GitHub App installation token, created during webhook processing, is not properly scoped when the App is installed across multiple repositories. This allows a user with push access to one repository to access private repositories within the same installati...
CVE-2026-54167
A flaw was found in Pipelines-as-Code. The GitHub App provider incorrectly processes webhook events by accepting an untrusted X-GitHub-Enterprise-Host header as the API host before validating the webhook signature. An unauthenticated attacker can exploit this by sending a specially crafted webhoo...
CVE-2026-47887
A flaw was found in Spring Framework. A Spring MVC application utilizing UrlFileNameViewController with an end-of-path mapping and no configured prefix is susceptible to an open redirect vulnerability. This could allow an attacker to redirect users to arbitrary malicious websites, potentially...
CVE-2026-64753
A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permissions issue. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-84635
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-42784
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
CVE-2026-63127
A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. The OAuth implementation in rmcp omits the RFC 9728 resource field from ResourceServerMetadata. This allows a malicious Model Context Protocol MCP server to publish metadata for a different legitimate MCP resource. Consequently,...
CVE-2026-92218
A flaw was found in the release-service-utils component. This vulnerability, known as Server-Side Template Injection, allows an attacker to execute unauthorized code. By manipulating specific input fields, a malicious tenant can inject harmful commands into templates that are processed twice. Thi...
CVE-2026-63128
A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without prop...
CVE-2026-19033
A flaw was found in bind. A remote attacker without a valid TSIG Transaction Signature can send unauthorized zone contents to a secondary server during a multi-message TCP IXFR Incremental Zone Transfer. The named process may apply this unauthenticated data before the TSIG signature is verified. ...
CVE-2026-89539
A flaw was found in the SUNRPC subsystem of the Linux kernel. The gssxdecoptionarray function, responsible for decoding options, does not correctly handle replies containing duplicate CREDSVALUE entries. This oversight causes the system to allocate memory for credentials multiple times without...
CVE-2026-78301
A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker could exploit this by introducing a specially crafted, malformed DNS zone into an authoritative BIND server. This action could cause the server to incorrectly delegate authority for parts of its own...
CVE-2026-75029
A flaw was found in BIND 9. A remote attacker could send multiple copies of a single record in a query response to the named service. This could lead to increased memory usage in the negative cache, potentially causing a Denial of Service DoS due to memory exhaustion. Mitigation To mitigate this...
CVE-2026-19668
A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker could exploit this vulnerability by sending a large number of specially crafted, invalid DNSSEC Domain Name System Security Extensions records to a BIND recursive resolver. This could lead to excessive...
CVE-2026-90997
A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in row-count semantics between the database driver and Keycloak's application logic allows an attacker to bypass replay protection. This vulnerability enables an attacker who intercepts single-use...
CVE-2026-81563
A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeat...
CVE-2026-80274
A flaw was found in BIND. A remote attacker, by sending a specially crafted DNSSEC-signed authoritative zone reply, can trigger an unexpected program exit in the validating resolver. This can lead to a Denial of Service DoS for the affected BIND resolver. Mitigation To mitigate this issue, disabl...
CVE-2026-77692
A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker can exploit this vulnerability by sending a specially crafted DNS-over-HTTPS DoH request containing an invalid SIG0 record. This action, combined with prematurely closing the connection, can cause the named...
CVE-2026-76163
A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending a specially crafted TKEY query to a BIND server configured without a global 'options' block in its 'named.conf' file. This can lead to an assertion failure, causing the BIND program to unexpectedly terminate. Th...
CVE-2026-19666
A flaw was found in BIND. When a resolver is configured to use DNS64, a specially crafted, malformed answer from an authoritative server can cause the named process to exit unexpectedly. This can lead to a Denial of Service DoS for clients relying on the affected resolver. Mitigation To mitigate...
CVE-2026-92615
A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...
CVE-2026-92365
A flaw was found in vllm-project vllm. A remote attacker could exploit an algorithmic complexity vulnerability by manipulating unknown functionality within the thinkingbudgetstate.py file. This manipulation results in inefficient algorithmic complexity, which may lead to a Denial of Service DoS,...
CVE-2026-18924
A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service. Mitigation Disable HTTP/2 Server Pu...
CVE-2026-81736
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
CVE-2026-19607
A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...
CVE-2026-79651
A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them...
CVE-2026-74909
Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the enforcer fails to correctly normalize web addresses that contain special encoded characters, such as those representing semicolons or directo...
CVE-2026-18212
A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the custom DEFLATE compression and decompression helpers fail to release native zlib memory after use. An unauthenticated attacker can exploit...
CVE-2026-17526
Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full administrative control over the realm, including the ability to manage users,...