211271 matches found
CVE-2026-17953
An insufficient policy enforcement flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517335150...
CVE-2026-64465
A flaw was found in the Linux kernel's USB xHCI eXtensible Host Controller Interface driver. When a USB device with active stream endpoints is disconnected, the system attempts to free stream resources while holding a lock with interrupts disabled. This can lead to a situation where a function th...
CVE-2026-64447
A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could...
CVE-2026-13346
A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to...
CVE-2026-14266
A flaw was found in 7-Zip. This vulnerability allows a remote attacker to execute arbitrary code on affected installations. Exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a malicious web page. The flaw occurs during the processing of...
CVE-2026-62995
A flaw was found in joserfc, a Python library for JSON Object Signing and Encryption JOSE standards. This vulnerability allows the library to accept JSON Web Tokens JWTs that include non-standard trailing padding. An attacker could exploit this to create malleable JWTs, potentially bypassing...
CVE-2026-17831
An insufficient validation of untrusted input flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517714728...
CVE-2026-17882
A policy bypass flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523637452...
CVE-2026-17843
An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518103887...
CVE-2026-17785
An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513769898...
CVE-2026-17812
An inappropriate implementation flaw was found in the DigitalCredentials component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517101596...
CVE-2026-17768
An insufficient validation of untrusted input flaw was found in the WebSockets component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512999037...
CVE-2026-17773
An insufficient validation of untrusted input flaw was found in the Cast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513232523...
CVE-2026-17771
An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513160525...
CVE-2026-17884
An object lifecycle issue flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523692228...
CVE-2026-17806
An insufficient validation of untrusted input flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516433058...
CVE-2026-17800
A side-channel information leakage flaw was found in the MediaRecording component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514480948...
CVE-2026-17747
An insufficient validation of untrusted input flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500472958...
CVE-2026-17829
An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517705103...
CVE-2026-17817
An inappropriate implementation flaw was found in the ReportingAndNEL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517461759...
CVE-2026-17852
An inappropriate implementation flaw was found in the Media Router component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519348818...
CVE-2026-17790
An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513919931...
CVE-2026-64266
A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. The fusereffolio function does not properly re-lock a request after unlocking it, which can lead to a use-after-free vulnerability. A local attacker could exploit this flaw to potentially execute arbitrary code or caus...
CVE-2026-64412
A flaw was found in the Linux kernel's netfilter ebtables component. A local attacker could exploit this vulnerability by providing a specially crafted module name that is not properly null-terminated. This improper string handling could lead to a buffer over-read when the requestmodule function...
CVE-2026-62343
A flaw was found in ImageMagick, a widely used software for editing and manipulating digital images. A local user could provide a specially crafted, invalid kernel during a morphology operation. This action could trigger a heap buffer over-write, leading to a denial of service DoS for the...
CVE-2026-64411
A flaw was found in the Linux kernel's netfilter ebtables component. A local user could exploit this vulnerability by providing a specially crafted table name that is not properly terminated. This improper handling of the table name can lead to a stack-out-of-bounds read, potentially causing a...
CVE-2026-62363
A flaw was found in ImageMagick. A local attacker with low privileges could cause a heap buffer over-write by passing a specially crafted argument to the 'fx' operation. This could lead to a denial of service...
CVE-2026-64414
A flaw was found in the Linux kernel's netfilter subsystem. This vulnerability occurs when the u32 module processes network packets containing unreadable fragments, leading to improper handling of these fragments. A remote attacker could exploit this flaw by sending specially crafted network...
CVE-2026-64289
A flaw was found in the Linux kernel. In the iommufd component, the iommufdhwptinvalidate function allows a local user to provide excessively large values for entrynum and entrylen during cache invalidation. This can lead to a Denial of Service DoS by causing the system to become unresponsive...
CVE-2026-17896
An use after free flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=525331547...
CVE-2026-17891
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=524639223...
CVE-2026-17889
An uninitialized use flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523735357...
CVE-2026-17867
An insufficient validation of untrusted input flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520527496...
CVE-2026-17862
An use after free flaw was found in the Tracing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520426287...
CVE-2026-17848
An insufficient validation of untrusted input flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518284253...
CVE-2026-17794
An insufficient validation of untrusted input flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514067070...
CVE-2026-17776
A policy bypass flaw was found in the Receiver component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513404032...
CVE-2026-17772
An out of bounds read flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513197846...
CVE-2026-17754
An inappropriate implementation flaw was found in the Blink component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501675996...
CVE-2026-13577
A flaw was found in Dancer2. When Cryptographically Secure PseudoRandom Number Generator CSPRNG modules are not available, Dancer2 generates insecure session identifiers IDs. This occurs because the system falls back to using a less secure, built-in random number generator. An attacker could...
CVE-2026-17663
An insufficient validation of untrusted input flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500225310...
CVE-2026-17659
An inappropriate implementation flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495463654...
CVE-2026-17653
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520514458...
CVE-2026-17671
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513257423...
CVE-2026-44909
A flaw was found in Proxygen. A remote, unauthenticated attacker could exploit a missing slow-consumer detection mechanism in the HTTP/2 protocol. By manipulating HTTP/2 flow-control settings, an attacker can force the server to buffer large amounts of data in memory indefinitely. This can lead t...
CVE-2026-17697
A type confusion flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517575864...
CVE-2026-17710
An inappropriate implementation flaw was found in the MHTML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519991712...
CVE-2026-17672
An insufficient validation of untrusted input flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513375270...