210449 matches found
CVE-2026-18206
A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard domain like .example.com to restrict which hosts can register or update clients. Due to improper validation, the...
CVE-2026-18214
Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This mean...
CVE-2026-18203
A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs ...
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18208
A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management solution used to secure modern applications and services. The issue occurs when a confidential client, configured to receive signed JWT...
CVE-2026-16105
A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remov...
CVE-2026-18215
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
CVE-2026-18217
A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...
CVE-2026-18218
A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application client using a "not-before" policy, the revocation may be silently ignored if the overall security realm already has an older,...
CVE-2026-12932
A flaw was found in OpenVPN. A memory leak in the tls-crypt-v2 client key extraction allows remote attackers to cause a denial of service DoS. By sending a flood of specially crafted packets, an attacker can exhaust the system's memory, making the service unavailable...
CVE-2026-11771
A flaw was found in OpenVPN. A remote attacker could exploit an off-by-one buffer write vulnerability during NTLM NT LAN Manager proxy authentication. By sending a specially crafted NTLM response from a malicious proxy server, the attacker could cause the OpenVPN client to crash, leading to a...
CVE-2026-13117
A flaw was found in OpenVPN. An incomplete guard allows remote authenticated peers to trigger a use-after-free vulnerability during TLS Transport Layer Security session promotion. This can lead to a denial of service, making the service unavailable, or memory leakage, which could potentially expo...
CVE-2026-12996
A flaw was found in OpenVPN. This use-after-free vulnerability allows remote authenticated peers to send specially crafted packets during TLS Transport Layer Security session promotion or expiry. Successful exploitation of this flaw could lead to a denial of service, making the service unavailabl...
CVE-2026-56390
A flaw was found in GNU Bison. When processing attacker-supplied grammar, the software improperly handles grammar-defined output paths. This allows an attacker to use directives such as %output and %header to specify arbitrary file paths. Consequently, generated files can be directed to any...
CVE-2026-8804
A flaw was found in Puppet resourceapi. This vulnerability occurs because the resource-api does not properly preserve the sensitive flag on parameters. As a result, sensitive information, such as passwords, can be stored in cleartext within the agent's local transaction state cache. This could...
CVE-2026-17999
An incorrect security ui flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521615681...
CVE-2026-18019
A side-channel information leakage flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=525691898...
CVE-2026-17970
An insufficient validation of untrusted input flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518814464...
CVE-2026-18015
An inappropriate implementation flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523698428...
CVE-2026-17981
An inappropriate implementation flaw was found in the Blink component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519719512...
CVE-2026-17980
An inappropriate implementation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519710361...
CVE-2026-17961
An inappropriate implementation flaw was found in the Session component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517700791...
CVE-2026-18008
An inappropriate implementation flaw was found in the Settings component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522412676...
CVE-2026-17994
An inappropriate implementation flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520663771...
CVE-2026-17984
An inappropriate implementation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519978460...
CVE-2026-17998
An incorrect security ui flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521601450...
CVE-2026-17987
An insufficient validation of untrusted input flaw was found in the Notifications component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519988071...
CVE-2026-17996
An inappropriate implementation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521473427...
CVE-2026-18001
An inappropriate implementation flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521757779...
CVE-2026-17990
An insufficient validation of untrusted input flaw was found in the WebAuthn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520018012...
CVE-2026-17991
An insufficient validation of untrusted input flaw was found in the AI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520110535...
CVE-2026-17979
A race flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519664497...
CVE-2026-17989
A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520017306...
CVE-2026-18014
An insufficient validation of untrusted input flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523248021...
CVE-2026-17959
An inappropriate implementation flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517607890...
CVE-2026-18000
An insufficient policy enforcement flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521623907...
CVE-2026-17964
An incorrect security ui flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518025103...
CVE-2026-18012
An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522938824...
CVE-2026-18010
An inappropriate implementation flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522419819...
CVE-2026-17968
An uninitialized use flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518337516...
CVE-2026-18009
An insufficient validation of untrusted input flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522419718...
CVE-2026-17986
An insufficient policy enforcement flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981896...
CVE-2026-18017
An use after free flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523731236...
CVE-2026-17978
A side-channel information leakage flaw was found in the WebCodecs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519610845...
CVE-2026-17966
An inappropriate implementation flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518058990...
CVE-2026-18018
An inappropriate implementation flaw was found in the Updater component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524467747...
CVE-2026-17971
An inappropriate implementation flaw was found in the Frame component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518815075...
CVE-2026-18007
An inappropriate implementation flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522404101...