221824 matches found
CVE-2026-91720
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523470135...
CVE-2026-91739
A missing authorization flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521951328...
CVE-2026-91732
A missing authorization flaw was found in the AppManifest component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511062248...
CVE-2026-91746
An integer overflow flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556260782...
CVE-2026-91734
An incorrect authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516780835...
CVE-2026-91728
An integer overflow flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556715288...
CVE-2026-91724
An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552283275...
CVE-2026-91747
A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...
CVE-2026-91736
An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553121008...
CVE-2026-91713
A missing authorization flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523715133...
CVE-2026-91709
A type confusion flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547815507...
CVE-2026-91717
A missing authorization flaw was found in the Android component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=549225472...
CVE-2026-91730
An incomplete cleanup flaw was found in the GetUserMedia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=543640868...
CVE-2026-91723
A race condition flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=474131239...
CVE-2026-91708
A race condition flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553115724...
CVE-2026-91745
An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558734727...
CVE-2026-92000
A flaw was found in adm-zip. A remote attacker could exploit this vulnerability by crafting a malicious ZIP archive containing highly compressible entries that declare a zero uncompressed size. This oversight prevents the application of zlib decompression output limits, leading to excessive memor...
CVE-2026-91741
A type confusion flaw was found in the CacheStorage component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=546413288...
CVE-2026-91743
A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516947138...
CVE-2026-91726
An out of bounds read flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556870863...
CVE-2026-91731
A type confusion flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523554372...
CVE-2026-91711
An out of bounds write flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558342353...
CVE-2026-91727
An incorrect reference resolution flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516893912...
CVE-2026-92248
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...
CVE-2026-19774
A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...
CVE-2026-53941
A flaw was found in Inspektor Gadget. An unprivileged container can trigger a Denial of Service DoS by providing a specially crafted /etc/ld.so.cache file when an uprobe-based gadget is active. This can lead to excessive CPU consumption and prevent other containers from starting, significantly...
CVE-2026-44778
A flaw was found in Inspektor Gadget. An unprivileged container can trigger a denial of service in the privileged Inspektor Gadget process. This occurs when a custom gadget with an eBPF section attaches to a specially crafted ELF Executable and Linkable Format binary. The USDT Userland Statically...
CVE-2026-80919
A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could trigger a hung job, causing the amdgpudevcoredumpformat function to recursively acquire a lock. This recursive locking can lead to a self-deadlock, resulting in a Denial of Service DoS where the system becomes...
CVE-2026-91957
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. This use-after-free vulnerability exists in the smartcard RDPDR device handler. A remote attacker could exploit this by triggering a worker thread creation failure after device registration during channel setup...
CVE-2026-91961
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a Universal Serial Bus USB Redirection for Remote Desktop Connection URBDRC control-transfer request with an invalid OutputBufferSize. This can trigger an assertion in the client process, leading to a denial of...
CVE-2026-91962
A flaw was found in FreeRDP. An integer overflow in the audin Apple backends, specifically when processing FramesPerPacket values from MSGSNDINOPEN messages, allows a malicious RDP Remote Desktop Protocol server to supply crafted values. This can cause the AudioQueueAllocateBuffer size computatio...
CVE-2026-91960
A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the StreamEnsureRemainingCapacity function, leading to an integer wraparound and a...
CVE-2026-91959
A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...
CVE-2026-91958
A flaw was found in FreeRDP. This vulnerability allows a remote attacker to trigger out-of-bounds memory access by crafting a malicious Remote Desktop Protocol RDP connection file. When a user opens this file, the FreeRDP client fails to properly validate array values, leading to a heap buffer...
CVE-2026-91956
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...
CVE-2026-90816
A flaw was found in FFmpeg. A CPU exhaustion issue can occur in the HLS protocol module when handling a specially crafted HLS HTTP Live Streaming playlist due to insufficient validation of duration or targetduration parameters. This vulnerability can lead to an excessive consumption of CPU...
CVE-2026-91954
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...
CVE-2026-91953
A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...
CVE-2026-91952
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted AVC444 graphics updates. This can cause the pooldecoderect function to enter an infinite loop when decoding AVC444 metablocks with an excessive number of region rectangles. The vulnerability lea...
CVE-2026-91951
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a specially crafted USB redirection message to the urbdrc client channel. This can trigger an out-of-bounds write, leading to a denial of service DoS for the client when verbose asserts are enabled. Mitigation To...
CVE-2026-91946
A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...
CVE-2026-91945
A flaw was found in FreeRDP. Authenticated RDP clients can exploit an out-of-bounds read vulnerability in smartcard response decoders. This occurs because the decoders fail to validate the length of Answer to Reset ATR fields against fixed inline arrays. By sending oversized ATR lengths, an...
CVE-2026-90815
A flaw was found in FFmpeg. An out-of-bounds read can occur in the Convolution Filter when processing a specially crafted file due to insufficient bounds checks. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not process untrusted files using the...
CVE-2026-91964
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...
CVE-2026-91963
A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...
CVE-2026-91955
A flaw was found in FreeRDP. FreeRDP contains a flaw where it fails to validate client-supplied desktop dimensions during the Graphics Command Channel GCC negotiation. A remote attacker can exploit this by sending crafted Remote Desktop Protocol RDP packets with zero or oversized dimensions. This...
CVE-2026-91950
A flaw was found in FreeRDP, where an out-of-bounds read vulnerability exists in the rdpdrdumppacket function. This is due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a specially crafted RDPDR packet, bypassing security checks and causi...
CVE-2026-91948
A flaw was found in FreeRDP. An authenticated client can send specially crafted, oversized messages to the server when the CHANNELOPTIONSHOWPROTOCOL feature is active. This can cause a buffer underflow, leading to corruption of memory and potentially allowing an attacker to execute malicious code...
CVE-2026-91947
A flaw was found in FreeRDP server. This use-after-free vulnerability exists in the DRDYNVC parser, where a channel pointer is dereferenced after its synchronization lock has been released. An authenticated client can exploit this by racing AUDIN channel closure messages against DRDYNVC data...
CVE-2026-55774
A flaw was found in OpenBao, an open source identity-based secrets management system. An authenticated user with specific access to lease revocation functions could revoke a lease in a different namespace if the foreign lease identifier was known. This bypasses Access Control List ACL isolation,...