Lucene search
+L
UbuntucveRecent

80179 matches found

UbuntuCve
UbuntuCve
added 2026/09/16 9:17 a.m.10 views

CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

5.9CVSS6.2AI score0.00285EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/16 9:17 a.m.8 views

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS6.1AI score0.00355EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/16 8:16 a.m.12 views

CVE-2026-92091

A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and the length of keyops is not bounded. A remote, unauthenticated attacker can supply a JWK with a large keyops array to an application that...

5.9CVSS5.7AI score0.00496EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/16 7:16 a.m.7 views

CVE-2026-19248

QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...

7.1CVSS5.8AI score0.0041EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/16 12:00 a.m.13 views

CVE-2026-91954

GHSA-ffjr-p229-hpch: NULL pointer dereference in gdisurfacebits when the client has not enabled NSCodec...

7.1CVSS5.5AI score0.00346EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/16 12:00 a.m.12 views

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

9.8CVSS6.4AI score0.00486EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/15 11:16 p.m.8 views

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

5.5CVSS5.7AI score0.00193EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 10:17 p.m.14 views

CVE-2026-83368

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM Enterprise Edition:...

7CVSS5.8AI score0.00215EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/15 10:17 p.m.13 views

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

7.8CVSS6.3AI score0.0018EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/09/15 10:17 p.m.12 views

CVE-2026-83408

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...

8.1CVSS5.8AI score0.00318EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/15 10:17 p.m.11 views

CVE-2026-83357

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...

8.1CVSS5.8AI score0.00379EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

6AI score0.00315EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

6.9AI score0.00333EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

7AI score0.00339EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.7 views

CVE-2026-91734

Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

6.6AI score0.00104EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00443EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

6.2AI score0.00228EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

7AI score0.00339EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91742

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

5.9AI score0.00195EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.13 views

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00407EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91713

Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00192EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.11 views

CVE-2026-91710

Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7.1AI score0.0031EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91739

Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00193EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00248EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

7AI score0.00385EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91711

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.0031EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91720

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

6AI score0.00277EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7AI score0.0031EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.6AI score0.00339EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.12 views

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00232EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91723

Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.8AI score0.00167EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91729

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00339EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91718

Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7AI score0.00331EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00268EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91735

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.5AI score0.00311EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91717

Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

5.8AI score0.00093EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.10 views

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00227EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.11 views

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

5.9AI score0.0027EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91725

Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

5.7AI score0.00237EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00252EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

6AI score0.00228EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00443EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.11 views

CVE-2026-91722

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

7AI score0.0031EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.16 views

CVE-2026-79994

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

8.7CVSS6.1AI score0.00106EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91724

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00336EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.8 views

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

7AI score0.00339EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00162EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91727

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

6.6AI score0.00108EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.9 views

CVE-2026-91715

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.7AI score0.00325EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/15 9:16 p.m.11 views

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

8.1CVSS5.9AI score0.0024EPSS
SaveExploits1References3
Total number of security vulnerabilities80179