215644 matches found
CVE-2026-102320
A missing authorization flaw was found in the CORS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554038924 https://code.google.com/p/chromium/issues/detail?id=102320...
CVE-2026-97931
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture US122L audio driver, which can lead to memory corruption or a Denial of Service DoS. The driver improperly permits read-only memory mappings to be upgraded to writable. A local user with read and write permissions to th...
CVE-2026-102300
An uninitialized resource flaw was found in the WebGPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560062638 https://code.google.com/p/chromium/issues/detail?id=102300...
CVE-2026-102329
A cross-site scripting flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563297615 https://code.google.com/p/chromium/issues/detail?id=102329...
CVE-2026-102327
An incorrect authorization flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496212975 https://code.google.com/p/chromium/issues/detail?id=102327...
CVE-2026-102318
An out of bounds read flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562279351 https://code.google.com/p/chromium/issues/detail?id=102318...
CVE-2026-102316
A flaw was found in chromium-browser. A use-after-free issue in the Views framework allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Exploitation of this vulnerability occurs when the application...
CVE-2026-102313
A flaw was found in chromium-browser. An uninitialized resource in the ANGLE Almost Native Graphics Layer Engine component leads to information disclosure. A remote attacker can exploit this vulnerability by convincing a user to open a crafted HTML page, enabling the attacker to read memory outsi...
CVE-2026-102311
An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=559737160 https://code.google.com/p/chromium/issues/detail?id=102311...
CVE-2026-102309
An use after free flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560867085 https://code.google.com/p/chromium/issues/detail?id=102309...
CVE-2026-102306
A flaw was found in chromium-browser's Bluetooth component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This triggers a use-after-free condition—where the application accesses memory that has already been deallocated—potentially...
CVE-2026-102301
An out of bounds write flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562004351 https://code.google.com/p/chromium/issues/detail?id=102301...
CVE-2026-97930
A flaw was found in the Linux kernel's ALSA usbusx2y driver. Due to an array size mismatch during device initialization, the driver performs an out-of-bounds read by copying more data than allocated for an internal buffer. An attacker capable of connecting a crafted USB device can exploit this...
CVE-2026-97487
A flaw was found in the Linux kernel's Journaled File System JFS. An unhandled error when initializing the file system block size during mount operations allows a local user with mount privileges to cause a Denial of Service DoS. By attempting to mount an incompatible or crafted storage volume, a...
CVE-2026-97929
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. This vulnerability can lead to information disclosure when communicating with an attached USB device. The driver fails to verify the length of incoming data transfers during interrupt handling, allowin...
CVE-2026-97486
A flaw was found in the Linux kernel's HPFS High Performance File System implementation. The driver does not verify whether setting the filesystem block size succeeds during a mount operation. A local user with the ability to mount storage devices could exploit this vulnerability by mounting a...
CVE-2026-102321
A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=565328105 https://code.google.com/p/chromium/issues/detail?id=102321...
CVE-2026-97485
A flaw was found in the Linux kernel's Optimized MPEG File System OMFS driver. The driver does not properly handle failures when configuring block sizes during file system mounting. A local attacker with the ability to mount a crafted file system image could exploit this flaw to trigger a kernel...
CVE-2026-97928
A flaw was found in the AMD GPU amdgpu driver within the Linux kernel. When clearing video memory VRAM upon deallocation, the driver performs an unnecessary virtual memory flush operation. A local user can trigger this flaw during graphics memory operations, causing the graphics processing unit G...
CVE-2026-97927
A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...
CVE-2026-97484
A flaw was found in the Linux kernel's USB/IP USB over Internet Protocol Virtual Host Controller Interface VHCI driver. A local user can cause a Denial of Service DoS by reading device status information through sysfs when a host controller fails to initialize. Because the driver does not properl...
CVE-2026-97483
A flaw was found in the Linux kernel. During error recovery or reset operations for USB storage devices connected to a root hub, the USB subsystem fails to respect memory allocation constraints during control transfers. A local user triggering device error recovery under memory pressure can cause...
CVE-2026-97926
A flaw was found in the Linux kernel's Unix File System UFS driver. When reading filesystem metadata from storage, the driver fails to validate cylinder group indices and rotor positions before caching them. A local attacker capable of mounting a specially crafted filesystem image could exploit...
CVE-2026-97923
A flaw was found in the Linux kernel's tracing subsystem. When initialization of a histogram variable reference fails during trace event configuration, the allocated memory is not properly released. A local user with administrative or tracing privileges can exploit this vulnerability by repeatedl...
CVE-2026-97481
A flaw was found in the Linux kernel's 8250 serial port driver. An attacker communicating over the serial interface can cause a Denial of Service DoS by flooding the port with messages during the system startup phase. Due to missing error handling for First-In, First-Out FIFO buffer interrupts, t...
CVE-2026-97480
A flaw was found in the Linux kernel's 8250 serial driver. During serial port registration for devices lacking an associated parent device, the driver attempts to access device properties without verifying that the device pointer is valid. This condition leads to a NULL pointer dereference, which...
CVE-2026-97925
A flaw was found in the Linux kernel's timer tick broadcast subsystem. A race condition occurs when installing a replacement clock event device concurrently with ongoing tick broadcast operations, causing the system to attempt to arm a detached timer device. If the central processing unit CPU...
CVE-2026-97482
A flaw was found in the Linux kernel's gokuudc USB gadget driver. An attacker or event triggering a USB reset interrupt before a gadget driver is bound, or after one is unbound, causes the interrupt handler to access an uninitialized driver pointer while logging the event. This flaw results in a...
CVE-2026-97924
A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...
CVE-2026-102822
A flaw was found in russh. This vulnerability allows a remote attacker to cause a Denial of Service DoS by terminating active connection tasks. When a connection is configured to permit sessions without a Message Authentication Code MAC, improper algorithm negotiation allows pairing with block...
CVE-2026-97922
A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...
CVE-2026-97921
A flaw was found in the Linux kernel's tracing subsystem. When configuring event histogram triggers, specifying an unpermitted modifier for a value or variable fails to release previously allocated memory on error. A local user with tracing access can exploit this flaw by repeatedly submitting...
CVE-2026-97479
A flaw was found in the Linux kernel's driver core subsystem. This issue may allow a local privileged user to cause a Denial of Service DoS by initiating device driver removal under specific dependency conditions. When a device is detached while its dependent supplier device is actively unbinding...
CVE-2026-97477
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. An error-handling issue during counter allocation and queue pair binding neglects to decrement the active counter tally when a bind attempt fails. A local user can exploit this flaw by triggering repeated binding...
CVE-2026-102830
A flaw was found in JupyterLab. Incomplete validation of language pack headers allows arbitrary JavaScript code to be injected and executed during string translation. An attacker could exploit this flaw by enticing a user to load a malicious third-party language pack, resulting in code execution...
CVE-2026-102824
A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...
CVE-2026-102821
A flaw was found in russh. An authenticated remote attacker can cause a Denial of Service DoS by initiating a Secure Shell SSH key renegotiation without completing it and flooding the server with channel open requests. Because the server continues buffering incoming requests without draining the...
CVE-2026-102820
A flaw was found in pageant. On Windows, the component fails to properly validate the response length received through shared memory when communicating with an authentication agent. A local attacker impersonating the agent can supply a manipulated length value, triggering an oversized memory...
CVE-2026-97920
A flaw was found in the Linux kernel. A local user could trigger this vulnerability by reading an event tracing histogram file when a memory allocation failure occurs. Because an error code overwrites the entry counter during cleanup, the system treats the error as an extremely large positive...
CVE-2026-97919
A flaw was found in the Linux kernel's tracing subsystem. When creating a named histogram trigger, the kernel registers the trigger before completing its setup. If initialization fails, the object is freed without being removed from the global tracking list. A local attacker can exploit this flaw...
CVE-2026-97478
A flaw was found in the Linux kernel's ACRN hypervisor driver. A race condition during interrupt file descriptor irqfd shutdown can lead to a use-after-free memory error when an irqfd is deassigned while event notification cleanup is concurrently processed. A local attacker could exploit this...
CVE-2026-102823
A flaw was found in russh, a Secure Shell SSH client and server library. When communicating with a client, a malicious SSH server can send channel lifecycle events referencing unverified, unopened, or closed channel identifiers. Because the library forwards these events to client handlers without...
CVE-2026-102831
A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...
CVE-2026-12345
A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...
CVE-2026-75926
A flaw was found in Hugo. This vulnerability enables arbitrary command execution by bypassing security restrictions designed to confine asset-processing tools. Because TailwindCSS is granted permission to create child processes by default, an attacker providing a malicious theme, module, or...
CVE-2026-95316
An unchecked return value flaw was found in the Performance component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552023752...
CVE-2026-97476
A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. An unprivileged local attacker can exploit this vulnerability to cause information disclosure across isolated network environments. Because socket inspection handlers do not filter connection and socket lists by the...
CVE-2026-97918
A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...
CVE-2026-97917
A flaw was found in the Linux kernel's Intel Versatile Processing Unit ivpu accelerator driver. A local user could trigger an out-of-bounds memory access by supplying an address range that extends beyond the allocated buffer object boundaries. This issue can lead to memory corruption or a system...