221824 matches found
CVE-2026-92033
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in Firefox for Android...
CVE-2026-92034
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...
CVE-2026-92038
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...
CVE-2026-92055
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DevTools component...
CVE-2026-92054
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Memory component...
CVE-2026-92037
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Animation component...
CVE-2026-92036
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking: HTTP component...
CVE-2026-86000
A flaw was found in Soup Sieve, a CSS selector library. An attacker can craft a malicious CSS selector that, when processed by the library, leads to excessive CPU consumption. This occurs due to a polynomial-time regular expression denial of service ReDoS vulnerability in the selector parser...
CVE-2026-85999
A flaw was found in Soup Sieve, a CSS selector library. A remote attacker can provide a specially crafted CSS selector containing long whitespace or comment runs. This can cause excessive CPU consumption during selector trimming, leading to a Regular Expression Denial of Service ReDoS by stalling...
CVE-2026-92942
A flaw was found in vm2. Sandboxed code can bypass the configured timeout mechanism by using the FinalizationRegistry feature. This allows an attacker to execute a busy loop in a cleanup callback, which is invoked outside the timeout accounting. Consequently, this can block the host event loop...
CVE-2026-92949
A flaw was found in vm2, a JavaScript sandbox. This vulnerability allows sandboxed scripts to bypass security protections, specifically vm.freeze and vm.readonly, which are designed to prevent unauthorized modifications to objects. An attacker can exploit this by directly accessing and invoking...
CVE-2026-92958
A flaw was found in vm2, a sandbox for Node.js. When the NodeVM embedder uses a builtin wildcard with negative entries to deny specific modules, such as 'fs' for file system access, the denylist mechanism fails to block subpaths like 'fs/promises'. This allows sandboxed code to bypass the intende...
CVE-2026-92959
A flaw was found in vm2, a JavaScript sandbox. This vulnerability allows a sandboxed script to bypass security restrictions designed to prevent asynchronous code execution. An attacker can exploit this by using specific Promise methods to assimilate malicious 'thenables,' enabling code to run...
CVE-2026-92961
A flaw was found in vm2. This vulnerability allows an attacker to bypass the bufferAllocLimit enforcement on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors. By doing so, the attacker can allocate arbitrary host memory, leading to memory exhaustion and a Denial of Service DoS conditio...
CVE-2026-92952
A flaw was found in vm2. The vm2 sandbox incompletely filters Node.js internal symbols, specifically nodejs.stream.disturbed and nodejs.stream.errored, across the sandbox boundary. This allows code running within the sandbox to obtain real host symbols and use them to corrupt the host-visible...
CVE-2026-92933
A flaw was found in vm2. The NodeVM component exposes the host util module, including the util.getCallSites function, to the sandbox as an unfiltered copy. On Node.js versions 22.9 and later, this allows sandboxed code to access util.getCallSites, which can return the host process's full call...
CVE-2026-92936
A flaw was found in vm2. Attacker-supplied code running within a sandbox can force the host-realm source transformer to throw a SyntaxError, for example, by providing malformed source to eval. By reading the error's stack property, the attacker can bypass sandbox-side host-path redaction. This...
CVE-2026-92598
A flaw was found in Nodemailer. This vulnerability arises from the failure to properly apply UTS-46 normalization when encoding international domain names. A remote attacker can exploit this by crafting recipient addresses with invisible characters or compatibility mappings. This allows them to...
CVE-2026-47890
A flaw was found in Spring Framework, affecting its MVC and WebFlux applications. When these applications use Server-Sent Events SSE with view fragments, a vulnerability allows for stream corruption. This can lead to unreliable data delivery and potential disruption of services. Mitigation Disabl...
CVE-2026-82209
A flaw was found in libcurl when libpsl support is enabled. A remote attacker could exploit this vulnerability by setting a Set-Cookie header with a Domain attribute that explicitly matches a public suffix. This improper handling causes libcurl to save the cookie with a wildcard domain scope,...
CVE-2026-76781
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...
CVE-2026-85078
A flaw was found in Sanic, an open-source Python web server/framework. A remote, unauthenticated attacker can exploit incomplete handling of HTTP/1.1 chunked-body requests. By injecting malicious data into the request's trailer section, the attacker can cause Sanic to process a hidden second...
CVE-2026-85077
A flaw was found in Sanic. The HTTP/1.1 response pipeline does not properly validate carriage-return or line-feed characters in response header names and values. This allows applications that place attacker-controlled data in response headers, filenames, or cookie attributes to inject additional...
CVE-2026-92987
A flaw was found in roxmltree. This vulnerability allows a remote attacker to cause a denial of service DoS by crafting a malicious XML document with a large number of attributes on a single element. The roxmltree library performs quadratic-time validation of attributes and namespaces during XML...
CVE-2026-41717
A flaw was found in Spring Data MongoDB. A remote attacker can exploit a SpEL Spring Expression Language expression injection vulnerability. This issue arises during parameter binding when a user-defined repository query method is annotated with @Query and uses a capture-all placeholder. Successf...
CVE-2026-92925
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...
CVE-2026-92973
A flaw was found in ansi2html. This cross-site scripting XSS vulnerability exists in the OSC 8 hyperlink handling, where the component fails to properly validate or escape URL targets. A remote attacker, by controlling ANSI text input, can inject malicious JavaScript schemes or manipulate href...
CVE-2026-61709
A flaw was found in OpenFGA, an authorization and permission engine. The ListUsers application programming interface API could incorrectly return users who should have been excluded from authorization decisions. This vulnerability arises when complex authorization rules, involving both exclusions...
CVE-2026-89418
A flaw was found in google-protobuf. An unauthenticated remote attacker can send a specially crafted message containing deeply nested protobuf group fields to a Node.js service using the affected library. This uncontrolled recursion can cause the service to crash, leading to a Denial of Service D...
CVE-2026-92596
A flaw was found in Nodemailer's addressparser component. This vulnerability, due to quadratic time complexity, allows a remote attacker to cause a Denial of Service DoS. By sending a specially crafted email with a large, comma-separated list of addresses, the attacker can block the Node.js event...
CVE-2026-81829
A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWSALB key provider is configured, the resolver constructs the key-fetch URL by directly concatenating the attacker-controlled kid heade...
CVE-2026-92382
An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhostisopacket and allowing a usbredir peer to write past the end of the packet...
CVE-2026-77874
A flaw was found in Hibernate ORM. This vulnerability allows an authenticated attacker to inject arbitrary SQL commands into the underlying database by manipulating the JSON path argument. The issue arises from improper handling of JSON path segments in the...
CVE-2026-77403
A flaw was found in RabbitMQ amqp091-go, a Go AMQP 0.9.1 client. A malicious or compromised AMQP broker can exploit this by advertising an extremely small frame size during connection negotiation. This can lead to excessive fragmentation of client publications, consuming significant CPU resources...
CVE-2026-87743
A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatchers. This allows the attacker to craft a URL that the security matcher considers public, but which is then routed to a...
CVE-2026-87742
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...
CVE-2026-91737
A flaw was found in Google Chrome. This use-after-free vulnerability in the PDF component allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affect...
CVE-2026-92904
A flaw was found in the foremanremoteexecution plugin's template invocations controller. The showtemplateinvocationbyhost action resolves the job invocation by ID without evaluating the caller's viewjobinvocations permission filter against the record. An authenticated user whose job invocation...
CVE-2026-92627
A flaw was found in HDF5. A heap-use-after-free vulnerability exists when converting a compound datatype containing floating-point members during a dataset read. An attacker can supply a specially crafted HDF5 file, which, when parsed by an application, can trigger this flaw. This can lead to a...
CVE-2026-90021
A flaw was found in the Linux kernel's USB MIDI gadget driver fmidi. When a sound card is not registered, a work queue item may not be properly initialized. This can lead to a warning and a potential system crash, resulting in a Denial of Service DoS for a local attacker...
CVE-2026-92894
A flaw was found in the foremanansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit. An authenticated user with the editansiblevariables permission can dele...
CVE-2026-9375
urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API preloadcontent=False when using Brotli support. The issue arises due to three independent code paths in response.py that bypass the maxlength protection introduced in version 2.6.0 to mitigate CVE-2025-66471...
CVE-2026-92893
A flaw was found in the foremanansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's viewhosts permission. An authenticated user whose host visibility is restricted by a...
CVE-2026-91729
A flaw was found in DigitalCredentials within Chromium. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to entice a user to visit a specially crafted HTML page. Successful exploitation would allow the attacker to execute arbitrary code outside of th...
CVE-2026-91738
An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=536450979...
CVE-2026-91716
An use after free flaw was found in the Auth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554558368...
CVE-2026-91718
An use after free flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553133215...
CVE-2026-91722
An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554953456...