CVE-2026-76047

A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...

CVE-2026-76041

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540027341 Mitigation Avoid visiting untrusted websites or opening untrusted HTML content. Users should exercise caution when browsing the internet a...

CVE-2026-76039

A flaw was found in Chromium, specifically in its Core component on Android. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to obtain sensitive information. By leveraging social engineering and a specially crafted HTML page, an attacker could exploit this...

CVE-2026-76038

A flaw was found in V8, the open-source JavaScript engine used in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential...

CVE-2026-76037

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program. Mitigation Mitigation for this...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

CVE-2026-76033

A flaw was found in Google Chrome's handling of Cross-Origin Resource Sharing CORS. A remote attacker, who has already compromised the browser's renderer process, could exploit this vulnerability by using a specially crafted HTML page. This could allow the attacker to bypass site isolation, a...

CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

CVE-2024-7708

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted HTTP requests. Specifically, a buffer leak occurs when processing requests that have a body but read zero bytes, such as 100-Continue requests, or during sl...

CVE-2026-76043

A flaw was found in the V8 component of Google Chrome. A remote attacker could exploit an incorrect calculation vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the browser's sandbox environment...

CVE-2026-76040

A flaw was found in chromium-browser. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-76036

A flaw was found in Dawn in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-74358

A flaw was found in the ext4 filesystem component of the Linux kernel. On 64-bit systems, an incorrect mapping of wait/wake bits during fast commits could lead to unexpected behavior. This issue, if triggered, may result in system instability or data integrity problems...

CVE-2026-74314

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability arises from improper handling of special fields during the recycling of map values, which can lead to unsafe destruction operations. Specifically, in tracing programs operating within a Non-Maskable...

CVE-2026-76044

A flaw was found in Google Chrome's USB component. A remote attacker, after compromising the renderer process, could exploit a race condition by using a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, allowing...

CVE-2026-74375

A flaw was found in the Linux kernel's RAID1 and RAID10 subsystems. When handling read errors, a specific sequence of operations involving cloned I/O requests and array suspension can lead to a deadlock. This can cause the system to become unresponsive, resulting in a Denial of Service DoS...

CVE-2026-74364

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Exclusive maps, which are designed to be used by a single program, can be incorrectly inserted as inner maps within a map-in-map structure. This bypasses the intended security checks, allowing an unrelated program to...

CVE-2026-45135

A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...

CVE-2026-58372

A flaw was found in SeaweedFS. An authenticated remote attacker with write access to a single bucket could exploit a path traversal vulnerability in the S3 gateway. By crafting a DeleteObjects XML request body with specific object keys containing directory traversal sequences, the attacker could...

CVE-2026-74356

A flaw was found in the Linux kernel's vhost subsystem. An incorrect return value from the vhostgetavailidx function can cause the host to livelock. A malicious guest operating system OS can exploit this by not processing virtqueue entries, leading to the host repeatedly disabling notifications a...

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

CVE-2026-72432

A flaw was found in the Linux kernel's Trusted Platform Module TPM Command Response Buffer CRB driver. This vulnerability occurs because the driver does not properly check for the presence of an Advanced Configuration and Power Interface ACPI companion object during device probing. An attacker...

CVE-2026-72352

A flaw was found in the Linux kernel's Human Interface Device HID Berkeley Packet Filter BPF component. An integer overflow, where a calculation exceeds the maximum value an integer type can store, in the hidbpfgetdata function's range check can occur when processing a very large size value. This...

CVE-2026-72461

A flaw was found in the AppArmor security module of the Linux kernel. This vulnerability, a reference count leak when updating the skctx, occurs because a reference is unconditionally put by the caller even when it has been transferred. A local attacker could exploit this flaw to cause a denial o...

CVE-2026-72440

A flaw was found in the Linux kernel's RAID1 Redundant Array of Independent Disks Level 1 implementation. During write failures, the md/raid1 module may fail to release writespending and barrier references. This oversight can lead to a resource leak, potentially causing system instability or a...

CVE-2026-72456

A flaw was found in AppArmor within the Linux kernel. When the getcurrentexepath function encounters a path resolution failure, it fails to properly release file and path references. This resource leak could be exploited by a local attacker, potentially leading to a Denial of Service DoS by...

CVE-2026-72400

A flaw was found in the Linux kernel's Segment Routing over IPv6 SEG6 component. Insufficient validation of the Segment Routing Header SRH length before reading its fixed fields can lead to an out-of-bounds read. A local attacker, by crafting a malicious BPF Berkeley Packet Filter program, could...

CVE-2026-72492

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. This memory corruption vulnerability, known as a use-after-free, occurs when the system attempts to use memory after it has been released. A remote attacker could trigger this by performing a concurrent close operation during lease...

CVE-2026-72380

A flaw was found in the Linux kernel's xen/pvcalls component. A malicious or buggy backend could send a specially crafted request identifier that, when processed, would lead to an out-of-bounds write. This could result in memory corruption and potentially cause the frontend to stop trusting the...

CVE-2026-72374

A flaw was found in the Linux kernel's AFS filesystem client. The AFS client uses an rxrpc server for callback notifications. Its message parsers incorrectly convert the -EAGAIN return value to 0 when the last packet has not been fully received but all currently queued data is consumed. This...

CVE-2026-72459

A flaw was found in the AppArmor security module of the Linux kernel. The aalabelalloc function, responsible for allocating security labels, did not properly free all allocated resources in its error handling path. This oversight could lead to a memory leak, potentially impacting system stability...

CVE-2026-72372

A flaw was found in the AFS Andrew File System component of the Linux kernel. This vulnerability arises from insufficient locking mechanisms when modifying internal data structures related to dynamic inode management. An attacker could potentially exploit this weakness, leading to system...

CVE-2026-18503

A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...

CVE-2026-72326

A flaw was found in the Linux kernel's CAKE Common Applications Kept Enhanced packet scheduler. This vulnerability arises from the incorrect handling of signed overhead values, which can lead to an integer underflow during packet length calculations. A negative effective length can then wrap to a...

CVE-2026-72321

A flaw was found in the Linux kernel's IPv4 Internet Group Management Protocol IGMP component. Incorrect handling of reference counts in the igmpmodtimer and igmpstoptimer functions can occur when a multicast list entry is concurrently removed. This can lead to a memory leak of the im structure,...

CVE-2026-72316

A flaw was found in the Linux kernel's device mapper dm era target. When the metadataopen function fails to allocate memory, it returns a NULL pointer. The calling function, eractr, does not correctly validate this return, leading to a NULL pointer dereference when the metadata is accessed. This...

CVE-2026-72315

A flaw was found in the Linux kernel's SMB client cifs. This issue occurs due to a delayed release of dentry reference counts during direct I/O DIO operations. When a file system is unmounted while these operations are still pending, it can lead to a "busy dentry" warning. This prevents the...

CVE-2026-72313

A flaw was found in the Linux kernel's display rendering manager DRM framebuffer helper drm/fb-helper. This vulnerability arises from incorrect synchronization with display controllers CRTCs, where the system attempts to synchronize with an inactive controller. This can lead to display timeouts a...

CVE-2026-72307

A flaw was found in the Linux kernel's mlxsw driver. When the mlxswspvrslpmtreereplace function encounters an error during Virtual Router VR replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not...

CVE-2026-74983

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

CVE-2026-74976

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

CVE-2026-72275

A flaw was found in the Linux kernel's fbdev broadsheetfb component. This issue arises when memory allocated for page references is not properly released during an error in the broadsheetfbprobe function. This oversight could lead to a memory leak, potentially allowing a local attacker to cause...

CVE-2026-72273

A flaw was found in the Linux kernel's efifb framebuffer driver. A memory leak occurs in the efifbprobe function because a string returned from fbgetoptions is not properly freed after use. This can lead to a gradual consumption of system memory, potentially impacting system stability and...

CVE-2026-72272

A flaw was found in the Linux kernel. Improper memory deallocation in the radeonfbpciregister function within the fbdev: radeon driver can lead to a memory leak. A local user could potentially exploit this flaw, causing the system to consume excessive memory resources, which may result in a Denia...

CVE-2026-72266

A flaw was found in the fbdev: vesafb component of the Linux kernel. A memory leak occurs in the vesafbprobe function because a string returned from fbgetoptions is not properly freed. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS for the system...

CVE-2026-72260

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Mediatek MT8192 audio driver in the Linux kernel. During the device probe process, the driver fails to properly check the return value of a runtime power management PM function. If the runtime resume operation fail...

CVE-2026-72257

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip qcom q6apm component. A race condition can occur when the q6apmfreefragments function frees audio buffers while graphcallback attempts to access a freed buffer due to a late Digital Signal Processor DSP...

CVE-2026-72254

A flaw was found in the Linux kernel's netfilter subsystem. A local attacker could exploit a vulnerability where a fib expression in a netdev egress base chain incorrectly dereferences a NULL pointer. This can lead to a NULL pointer dereference, causing a system crash and resulting in a Denial of...

CVE-2026-72240

A flaw was found in the Linux kernel's sm501 driver. When a device registration fails, the system does not properly release a device reference. This oversight can lead to a resource leak, potentially causing system instability or a Denial of Service DoS over time...

CVE-2026-72225

A flaw was found in the Linux kernel's jbd2 journaling layer. An integer underflow vulnerability in the jbd2journalinitializefastcommit function occurs when validating journal capacity. This underflow can corrupt critical journal metadata, such as jlast, jfcfirst, and jfree, leading to a journal...