221796 matches found
CVE-2026-66906
A flaw was found in the Apache Camel Azure Storage Blob component. This relative path traversal vulnerability allows a remote attacker to manipulate blob names in a consumed container. By including parent-directory segments in blob names, an attacker can cause the Camel process to write files to...
CVE-2026-99255
A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS by executing chained asynchronous operations before terminating a task. Due to a race condition in the asynchronous work queue cleanup handler, an exiting process can overlook ...
CVE-2026-121053
An ui misrepresentation flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514074839...
CVE-2026-99254
A flaw was found in the Linux kernel's iouring subsystem. An unprivileged local user could cause a Denial of Service DoS by creating multiple interdependent asynchronous I/O rings and initiating task termination or cancellation. During cleanup, the kernel repeatedly floods the cancelling process...
CVE-2026-99253
A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS due to a race condition in the request cancellation mechanism. When a process terminates or executes a new program, a wake-up notification can be missed before the task enters ...
CVE-2026-60093
A flaw was found in Apache Camel Azure-Storage Datalake. The downloadToFile operation in the camel-azure-storage-datalake component allows a remote attacker to write files to arbitrary locations on the local filesystem. This occurs because the component does not properly validate remote path name...
CVE-2026-121220
An incorrect authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553158297...
CVE-2026-59271
A flaw was found in Spring AMQP. When the RabbitMQ management aliveness check fails, the configured administrator password is inadvertently embedded in cleartext within the generated exception message. This could allow an attacker with access to system logs or error reporting to obtain sensitive...
CVE-2026-121181
An use after free flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936269...
CVE-2026-121044
An use after free flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568832157...
CVE-2026-121180
A buffer overflow flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936265...
CVE-2026-121080
An use after free flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568818122...
CVE-2026-99252
A flaw was found in the Linux kernel's iouring subsystem. A local user can trigger a Denial of Service DoS condition due to missing preemption protection during internal queue updates. When a lower-priority task updating a queue is interrupted by a higher-priority task on the same processor core,...
CVE-2026-121207
An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563359278...
CVE-2026-121185
An use after free flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565681453...
CVE-2026-121113
A buffer overflow flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567106301...
CVE-2026-121179
An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936263...
CVE-2026-121083
An use after free flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567321055...
CVE-2026-121082
A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567222737...
CVE-2026-99245
A flaw was found in the Linux kernel. A local user could bypass keyring link restrictions due to a race condition in the kernel's key management subsystem. This issue occurs when the kernel checks link restrictions before acquiring the necessary lock during key linking operations, racing against...
CVE-2026-47893
A flaw was found in Spring WebFlux. A remote attacker interacting with a Spring WebFlux application that supports WebSocket connections could exploit this vulnerability. The flaw occurs because the application may include sensitive request headers in exception reasons, leading to the exposure of...
CVE-2026-80899
A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System fscache backend. This component, which provided image lazy pulling functionality, contained implementation issues that led to its deprecation and subsequent removal. While the specific impact of these issues is not...
CVE-2026-80835
A flaw was found in the Linux kernel's qcom-rng driver. This driver, responsible for generating random numbers, allowed two of its interfaces to operate simultaneously without proper synchronization. This oversight could lead to the generation of predictable or non-random values, potentially...
CVE-2026-47860
A flaw was found in Spring AMQP. An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer Java Virtual Machine JVM with a single approximately 1 MB message. This unbounded decompression of attacker-supplied compressed message...
CVE-2026-99246
A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A race condition occurs when tracing link reset events without proper locking, which can cause link data to be freed while it is actively being accessed. An unauthenticated remote attacker could exploit...
CVE-2026-104895
A flaw was found in jackson-dataformat-smile. A remote attacker can cause a Denial of Service DoS by submitting specially crafted binary data to an asynchronous parsing endpoint. The parser fails to validate length prefixes, allowing untrusted input to trigger integer overflows or excessive memor...
CVE-2026-99244
A flaw was found in the Linux kernel's process ID PID namespace subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through excessive CPU consumption. During namespace cleanup, repeated internal signal notifications can prevent the process reaper from entering a sle...
CVE-2026-99243
A flaw was found in the Linux kernel's iouring subsystem, which can lead to a Denial of Service DoS. Due to a missing memory barrier during asynchronous workqueue io-wq shutdown, a race condition can occur on systems with weakly ordered processor architectures. A local user can exploit this flaw...
CVE-2026-89843
A flaw was found in the Linux kernel's scsi: qla2xxx component. This vulnerability arises in several block SCSI generic bsg handlers due to improper initialization of stack buffers when processing requests. A local attacker can exploit this by sending a specially crafted request, which causes...
CVE-2026-89859
A flaw was found in the qla2xxx SCSI driver within the Linux kernel. The qla2x00dodportdiagnostics function allocates a diagnostics buffer without initializing all its fields. When this buffer is copied to user space, the uninitialized options and unused fields can leak sensitive kernel heap memo...
CVE-2026-121253
A missing authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553265115...
CVE-2026-121252
An incorrect authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550356947...
CVE-2026-121251
A missing authorization flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561672123...
CVE-2026-121243
An information leak flaw was found in the Frames component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513451861...
CVE-2026-121240
An improper input validation flaw was found in the Variations component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563181376...
CVE-2026-121236
An improper input validation flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553260839...
CVE-2026-121230
A race condition flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566683383...
CVE-2026-121235
An information leak flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540040995...
CVE-2026-121232
An incorrect authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567846676...
CVE-2026-121225
An incorrect authorization flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563349192...
CVE-2026-121222
An incorrect authorization flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523708065...
CVE-2026-121217
An use after free flaw was found in the Streaming component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/500600456...
CVE-2026-121209
An ui misrepresentation flaw was found in the Input component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/40052279...
CVE-2026-121204
An incomplete cleanup flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562957821...
CVE-2026-121206
An ui misrepresentation flaw was found in the Isolated component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553289241...
CVE-2026-121205
An incorrect authorization flaw was found in the CORS component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562957845...
CVE-2026-121198
A confused deputy flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563340726...
CVE-2026-121195
An incorrect authorization flaw was found in the TrustedTypes component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/571784617...