80000 matches found
CVE-2026-89914
In the Linux kernel, the following vulnerability has been resolved: K...
CVE-2026-90015
In the Linux kernel, the following vulnerability has been resolved: x...
CVE-2026-19666
On a resolver configured to use dns64, if an applicable answer fro...
CVE-2026-89866
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-89788
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2treeconnect ksmbdtreeconnconnect publishes a new tree connection in sess-treeconns with a single reference and returns its pointer to smb2treeconnect. The handler continues to...
CVE-2026-89779
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...
CVE-2026-19941
An inapplicable NSEC record may be accepted by a named resolver as p...
CVE-2026-89782
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16MAX entries During $LogFile replay, logreplay indexes the transaction table by the transactid taken from the log record header. checklogrec only verifies that transactid is non-zero...
CVE-2026-89948
In the Linux kernel, the following vulnerability has been resolved: b...
CVE-2026-89945
In the Linux kernel, the following vulnerability has been resolved: A...
CVE-2026-89827
In the Linux kernel, the following vulnerability has been resolved: d...
CVE-2026-89808
In the Linux kernel, the following vulnerability has been resolved: d...
CVE-2026-79994
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...
CVE-2026-87267
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of thi...
CVE-2026-77955
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
CVE-2026-89085
heap buffer overflow in initfats / fattableread...
CVE-2026-89797
In the Linux kernel, the following vulnerability has been resolved: p...
CVE-2026-78301
A malformed zone may contain an NS or DNAME node above its origin, whi...
CVE-2026-81634
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...
CVE-2026-83357
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...
CVE-2024-36315
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality...
CVE-2026-46619
Open Access Management OpenAM is an access management solution. Prio...
CVE-2026-45794
Open Access Management OpenAM is an access management solution. Prio...
CVE-2026-46623
Open Access Management OpenAM is an access management solution. Prio...
CVE-2024-14029
Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked head...
CVE-2026-45051
Open Access Management OpenAM is an access management solution. Prio...
CVE-2026-41573
Open Access Management OpenAM is an access management solution. Prio...
CVE-2026-45052
Open Access Management OpenAM is an access management solution. Prio...
CVE-2026-92039
Mitigation bypass in the DOM: Notifications component. This vulnerabil...
CVE-2026-92072
Incorrect boundary conditions in the Safe Browsing component. This vul...
CVE-2026-92078
Denial-of-service in the Security component. This vulnerability was fi...
CVE-2026-92011
Privilege escalation due to incorrect boundary conditions in the Graph...
CVE-2026-92022
Use-after-free in the DOM: HTML Parser component. This vulnerability w...
CVE-2026-91951
GHSA-h5w2-q35j-443h: Out-of-bounds write in urbsendcurrentframenumberresult...
CVE-2026-92018
Sandbox escape in the DOM: Core & HTML component. This vulnerability w...
CVE-2026-91963
GHSA-hw7p-5h2r-83gq: Disclosure of uninitialized heap memory in the urbdrc USB redirection path...
CVE-2026-92046
Use-after-free in the Graphics component. This vulnerability was fixed...
CVE-2026-91954
GHSA-ffjr-p229-hpch: NULL pointer dereference in gdisurfacebits when the client has not enabled NSCodec...
CVE-2026-92069
Spoofing issue in the DOM: Navigation component. This vulnerability wa...
CVE-2026-91952
GHSA-m85m-3qxv-63h5: Infinite loop / CPU DoS in pooldecoderect...
CVE-2026-91947
GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...
CVE-2026-91961
GHSA-w9qg-g24r-77f6: URBDRC/libusb control-transfer path aborts on reachable OutputBufferSize assertion...
CVE-2026-92020
Privilege escalation due to incorrect boundary conditions in the Graph...
CVE-2026-92014
Privilege escalation due to incorrect boundary conditions in the Graph...
CVE-2026-92019
Mitigation bypass in the Remote Settings Client component. This vulner...
CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerabi...
CVE-2026-92006
Privilege escalation due to incorrect boundary conditions in the Graph...
CVE-2026-92036
Incorrect boundary conditions in the Networking: HTTP component. This...