ROS-20260827-73-0026

The vulnerability of the cifsreadpageworker function in the fs/smb/client/file.c module of the SMB client support library in Linux kernel involves the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0010

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

ROS-20260824-73-0011

The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0049

The vulnerability of the ksetregister function in the lib/kobject.c module of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260819-73-0043

The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260819-73-0068

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

ROS-20260819-73-0033

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260819-73-0075

The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...

ROS-20260819-73-0067

The vulnerability in Tomcat11 is related to insufficient technical documentation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20260818-73-0005

The vulnerability of the Fuji and Olympus modules in the Libexif library for grammatical analysis of EXIF files is related to a numerical overflow condition. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information or cause service failures...

ROS-20260810-73-0024

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260810-73-0007

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

ROS-20260806-73-0006

The vulnerability of the ax25kissrcv function in the ax25kissrcv module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260806-73-0032

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260806-73-0007

The vulnerability of the SSID function in the cfg80211connectresult module of the net/wireless/sme.c kernel of the Linux operating system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260805-73-0009

The vulnerability of the skbpartialcsumset function in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260803-73-0009

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

ROS-20260803-73-0002

The vulnerability of the RedisBloom data structure module of the Redis database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260803-73-0022

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20260729-73-0006

The vulnerability in python-PyPDF2 relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260729-73-0013

The vulnerability in exim is related to errors in the representation of specified functions. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...

ROS-20260728-73-0018

The vulnerability in python-PyPDF2 is related to errors in processing XML entities. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260727-73-0002

A vulnerability in the Itemdirectviewref::derivedfieldtransformerforwhere function of the MariaDB database management system is related to incorrect behavior. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260724-73-0030

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260724-73-0032

The vulnerability in dotnet10.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260724-73-0027

The vulnerability in dotnet10.0 is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260722-73-0020

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

ROS-20260722-73-0022

The vulnerability of the user interface of Google Chrome and Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

ROS-20260722-73-0019

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

ROS-20260722-73-0021

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

ROS-20260722-73-0005

The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260722-73-0006

The vulnerability of the Dialog component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

ROS-20260721-73-0026

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML...

ROS-20260721-73-0017

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HT...

ROS-20260721-73-0021

The vulnerability of the File System Access API interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

ROS-20260721-73-0011

The vulnerability of the Shared Storage API interface in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

ROS-20260720-73-0004

The vulnerability of the WebHID Human Interface Device interface of the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code by connecting to HID...

ROS-20260720-73-0040

The vulnerability of Google Chrome’s Codecs component relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260720-73-0073

The vulnerability of the Sanitizer API on Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

ROS-20260720-73-0063

The vulnerability of the Google Chrome browser’s Runtime component is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260717-73-0019

The vulnerability in the rendering mode of Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260717-73-0006

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260717-73-0009

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTML page from a remote location...

ROS-20260717-73-0016

The vulnerability of the DevTools suite for web development in the Google Chrome web browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

ROS-20260716-73-0074

The vulnerability in the isolated iframe environment of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on file downloads by using a specially created HTML page...

ROS-20260716-73-0013

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260716-73-0021

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to bypass security restrictions by downloading malicious extensions remotely...

ROS-20260716-73-0005

The vulnerability of Google Chrome’s WebRTC technology is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created web page...

ROS-20260715-73-0008

The vulnerability of the moddavlock module in the Apache HTTP Server is related to pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a denial-of-service attack...