221407 matches found
CVE-2026-98328
A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw allows a local user to cause a Denial of Service DoS by initiating a wireless scan on a device supporting 6 GHz High Efficiency HE bands. Because the kernel fails to account for the HE 6 GHz capability element when...
CVE-2026-98327
A flaw was found in the Linux kernel's mac80211 wireless mesh networking subsystem. When leaving or stopping a mesh network while a Channel Switch Announcement CSA is still pending, the kernel fails to reset the switch state and release allocated memory. A local privileged user could exploit this...
CVE-2026-98325
A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during...
CVE-2026-98324
A flaw was found in the Linux kernel's PXA Direct Memory Access DMA driver. A local user could trigger a Denial of Service DoS or memory corruption due to descriptor double-counting during allocation. When processing hardware descriptors, the driver incorrectly increments the descriptor counter,...
CVE-2026-98323
A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...
CVE-2026-98322
A flaw was found in the Linux kernel's Netfilter network filtering subsystem. When configuring IPv4 Network Address Translation NAT rules with the netmap feature, the system fails to initialize a temporary memory buffer on the stack. As a result, uninitialized kernel stack data is copied and...
CVE-2026-98321
A flaw was found in the Linux kernel's netfilter subsystem. When registering Network Address Translation NAT hooks, failure handling during entry insertion does not properly unregister and release allocated hooks. A local attacker could exploit this flaw to cause a memory leak, potentially leadin...
CVE-2026-17025
A flaw was found in graphene. Due to insufficient input sanitization and output escaping in user profile fields, an authenticated attacker with low-level privileges can conduct stored Cross-Site Scripting XSS attacks. By injecting malicious scripts into profile fields, an attacker can execute...
CVE-2026-98319
A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. An error handling failure during display synchronization processing prevents allocated event memory from being released when an operation fails. A local user can exploit this vulnerability by submitting specific displa...
CVE-2026-98320
A flaw was found in the Linux kernel's netfilter subsystem. In the flowtable component, connection tracking reference counts are prematurely released before flow entries are fully removed from memory. An attacker could exploit this timing issue during network flow processing, triggering a...
CVE-2026-98318
A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...
CVE-2026-98317
A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...
CVE-2026-108106
A flaw was found in snappy-java. A remote attacker can exploit this unbounded memory allocation vulnerability by providing crafted compressed input with an excessively large declared uncompressed size during decompression. Successful exploitation allows the attacker to exhaust available system...
CVE-2026-106398
An incorrect authorization flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/543082212...
CVE-2026-106271
A missing authorization flaw was found in the Workers component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553118313...
CVE-2026-106212
An incorrect authorization flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540072162...
CVE-2026-106360
An information leak flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/535639435...
CVE-2026-106348
An information leak flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537107728...
CVE-2026-106307
An incorrect authorization flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/537832408...
CVE-2026-106262
An incomplete cleanup flaw was found in the GetUserMedia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533066295...
CVE-2026-75352
A flaw was found in OpENer. An integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to send specially crafted network requests. Exploitation of this flaw can cause the service to crash, resulting in a Denial of Service DoS...
CVE-2026-75353
A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted connection requests, an attacker can trigger an invalid memory read that crashe...
CVE-2026-75351
A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to trigger an application crash. By sending a specially crafted connection request, an attacker can exploit this flaw to cause a Denial of...
CVE-2026-107822
A flaw was found in MariaDB. An issue in the Access Control List ACL cache causes identical privilege cache keys to be generated when a role and a local user share the same name. An attacker with user creation privileges can exploit this key collision by creating a matching account, allowing them...
CVE-2026-107819
A flaw was found in MariaDB Connector/C. During automatic Transport Layer Security TLS connection setup, the library verifies certificate trust but fails to confirm that the server hostname matches the certificate before switching authentication methods. An active man-in-the-middle MitM attacker...
CVE-2026-107821
A flaw was found in MariaDB. An attacker able to place a crafted table format FRM metadata file into the database data directory can exploit insufficient validation of metadata boundaries and field counts when the server opens the file. This could lead to out-of-bounds memory operations,...
CVE-2026-107817
A flaw was found in the mysqljson plugin in MariaDB. The plugin incorrectly assumes that imported MySQL tables contain valid binary JavaScript Object Notation JSON data. An attacker can exploit this issue by supplying a specially crafted MySQL table containing invalid JSON data, triggering an...
CVE-2026-106410
A missing authorization flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517801814...
CVE-2026-106409
An incorrect reference resolution flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559097675...
CVE-2026-106404
An incorrect authorization flaw was found in the FontAccess component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553150261...
CVE-2026-106400
A clickjacking flaw was found in the Messages component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/518108937...
CVE-2026-106395
An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553121488...
CVE-2026-106387
A missing authorization flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/518096516...
CVE-2026-106373
An use after free flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523699645...
CVE-2026-106372
An incorrect authorization flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/557288890...
CVE-2026-106367
A missing authorization flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520533412...
CVE-2026-106351
An observable discrepancy flaw was found in the Safebrowsing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553164077...
CVE-2026-106341
A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/558539954...
CVE-2026-106337
An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553145497...
CVE-2026-106333
An incorrect authorization flaw was found in the Input component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517649552...
CVE-2026-106330
An information leak flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553135213...
CVE-2026-106328
An incorrect authorization flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/518091868...
CVE-2026-106322
An open redirect flaw was found in the AppManifest component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517213220...
CVE-2026-106321
An information leak flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556235808...
CVE-2026-106303
An observable discrepancy flaw was found in the Autofill AI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517475258...
CVE-2026-106292
A buffer overflow flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524587778...
CVE-2026-106295
An incorrect authorization flaw was found in the Unbounded Element component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553138969...
CVE-2026-106180
An observable discrepancy flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517429254...