CVE-2023-4900

CVE-2023-4900 affects Google Chrome/Chromium family (Android Chrome prior to 117.0.5938.62) where an inappropriate implementation in Custom Tabs allows a remote attacker to obfuscate a permission prompt via a crafted HTML page. Connected advisories indicate this is one of multiple Chromium issues...

CVE-2023-6351

CVE-2023-6351 describes a use-after-free in libavif used by Google Chrome before 119.0.6045.199, allowing a remote attacker to cause heap corruption via a crafted AVIF file. Affected product/component: Google Chrome/Chromium with libavif. Root cause: use-after-free in libavif leading to possible ...

CVE-2024-26640

CVE-2024-26640 — Linux kernel TCP rx zerocopy sanity checks (Mode C) Affects: Linux kernel TCP rx zerocopy path. Root cause: can_map_frag() lacked validation when mapping NIC-allocated pages, risking misuse of pages owned by filesystems. The patch adds two checks: (1) the page must not be a compo...

CVE-2024-26960

CVE-2024-26960 is a Linux kernel vulnerability in mm: swap that fixes a race between free_swap_and_cache() and swapoff(). The theoretical window could allow swapoff() to teardown a swap_info_struct while free_swap_and_cache() runs, risking swap_page_trans_huge_swapped() accessing freed swap_map m...

CVE-2025-29769

CVE-2025-29769 affects libvips, where the heifsave path could mis-handle a multiband TIFF input (4 channels) and output HEIF with 3 channels, then attempt to write 4 channels, causing a heap-based buffer overflow and possible crash. Root cause: incorrect alpha-channel determination when colour in...

CVE-2014-4914

The vulnerability CVE-2014-4914 affects Zend Framework’s Zend_Db_Select::order in versions prior to 1.12.7. The issue arises from improper handling of parentheses in the ORDER BY clause, enabling remote SQL injection via unspecified vectors. Affected product: Zend Framework (PHP framework); vulne...

CVE-2015-8767

CVE-2015-8767 affects the Linux kernel SCTP path: net/sctp/sm_sideeffect.c fails to properly synchronize a lock with a socket during heartbeat timeout processing, allowing a local attacker to cause a denial of service (deadlock) via crafted sctp_accept calls. Affected: Linux kernel before 4.3 (pe...

CVE-2018-1123

The CVE-2018-1123 issue affects procps-ng (ps) where an mmap-based buffer overflow allows a denial of service, with inbuilt guard paging limiting impact to a crash. Affected version: procps-ng before 3.3.15; mitigation is to upgrade to 3.3.15 or newer where the issue is addressed. The vulnerabili...

CVE-2018-18557

LibTIFF 4.x, specifically versions up to 4.0.9 with JBIG support, is vulnerable to an out-of-bounds write in tif_jbig.c (JBIGDecode) when decoding arbitrarily-sized JBIG data, enabling potential denial of service or code execution via crafted TIFF files (CVE-2018-18557). Connected advisories (Arc...

CVE-2018-20547

CVE-2018-20547 is a vulnerability in libcaca 0.99.beta19 involving an illegal READ memory access in get_rgba_default() within caca/dither.c for 24bpp data. The issue is documented in FreeBSD VuXML as part of the libcaca set of vulnerabilities (CVE-2018-20544..20549) and is reflected in multiple O...

CVE-2018-9516

CVE-2018-9516 affects the Linux kernel HID subsystem: in hid_debug_events_read() of drivers/hid/hid-debug.c there is a possible out-of-bounds write due to missing bounds checks. This can enable local privilege escalation with system-level rights; no user interaction is required. The vulnerability...

CVE-2019-10156

CVE-2019-10156 affects Ansible: templating flaw in versions before 2.6.18, 2.7.12 and 2.8.2 enables information disclosure through unintended variable substitution (contents of any variable may be disclosed). Several connected advisories confirm fixes/upgrades: e.g., Debian stable (buster) update...

CVE-2020-13164

Wireshark vulnerable component: NFS dissector (packet-nfs.c) can crash due to excessive recursion in the NFS graph traversal. Affected versions include Wireshark 3.2.0–3.2.3, 3.0.0–3.0.10, and 2.6.0–2.6.16. The root cause is unbounded recursion when encountering cycles in the directory graph on a...

CVE-2020-15961

CVE-2020-15961 describes insufficient policy validation in Chrome extensions, enabling a sandbox escape via a crafted extension. The issue affects Google Chrome/Chromium prior to 85.0.4183.121, where an attacker could persuade a user to install a malicious extension to bypass sandbox restrictions...

CVE-2020-26418

Wireshark memory leak in the Kafka protocol dissector (affecting Wireshark 3.4.0 and 3.2.0–3.2.8) can cause denial of service via crafted captures or packet injection. The issue is evidenced across multiple public advisories in connected documents (e.g., Debian LTS advisory DLA-2547-1 listing CVE...

CVE-2021-21159

CVE-2021-21159 describes a heap buffer overflow in Chrome’s TabStrip prior to 89.0.4389.72. A remote attacker could potentially exploit this heap corruption via a crafted HTML page, leading to arbitrary code execution or crash. Connected advisories confirm Chrom(e/ium) components affected and not...

CVE-2021-28711

CVE-2021-28711, CVE-2021-28712 and CVE-2021-28713 relate to Xen PV backends (blkfront, netfront, and hvc_xen/console) in driver domains. The vulnerability arises when a malicious driver-domain can generate high-frequency events to exhaust guest interrupt servicing, causing Denial of Service in th...

CVE-2021-39241

HAProxy contains a vulnerability CVE-2021-39241 where an HTTP method name may contain a space before a protected resource, potentially causing a request to be interpreted as accessing that resource. Affected series include HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 b...

CVE-2021-39253

CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...

CVE-2022-2057

CVE-2022-2057 is a Divide By Zero flaw in libtiff's tiffcrop affecting libtiff 4.4.0. Connected advisories confirm the issue and list the fix patch (commit f3a5e010) and ongoing updates across distributions (Debian, AlmaLinux, Alt Linux, cloud/packs). Affected component: tiffcrop within libtiff; ...

CVE-2022-39353

CVE-2022-39353 — The xmldom library’s DOMParser can parse XML with multiple top-level elements, adding multiple root nodes to Document.childNodes without error. This violates the single-root assumption and is the underlying issue that prompted CVE-2022-39299. Affected: xmldom (JavaScript XML DOM ...

CVE-2024-26645

CVE-2024-26645 : The issue is in the Linux kernel tracing subsystem (tracing_map) where a race can occur when inserting a new element. The root cause is CPU reordering between memcpy(elt->key, key, map->key_size) and entry->val = elt in __tracing_map_insert(), which can cause a later che...

CVE-2024-35886

CVE-2024-35886: Linux kernel vulnerability in IPv6 routing dump logic caused infinite recursion in fib6_dump_done() during netlink dump (AF_UNSPEC RTM_GETROUTE/more data). Logs show repeated fib6_dump_done() calls and a stack guard page hit due to recursive destructor behavior. The publicly repor...

CVE-2013-1418

The CVE-2013-1418 issue affects MIT Kerberos 5 (krb5) KDC: when multiple realms are configured, setup_server_realm() can dereference NULL and crash the daemon via a crafted request, causing DoS. Remote unauthenticated access is possible per the description. Public details in connected sources con...

CVE-2016-4303

CVE-2016-4303 affects iperf/iperf3 and the cJSON-UTF8/UTF-16 parsing path; the vulnerability allows denial of service or arbitrary code execution via a crafted JSON string that triggers a heap-based buffer overflow. The connected docs confirm downstream patches: upstream releases addressed the is...

CVE-2017-1000487

Plexus-utils (component: Plexus-utils library) is vulnerable prior to version 3.0.16 due to improper handling of contents inside double-quoted strings, enabling potential command injection. Affected product references indicate compatibility and remediation paths, with fixes available in 3.0.16 or...

CVE-2017-17786

GIMP 2.8.22 is affected by CVE-2017-17786 due to a heap-based buffer over-read in the TGA importer (ReadImage in plug-ins/common/file-tga.c), triggered by an unexpected RGBA bits-per-pixel value. Public references show this affects various Linux distributions and that patches exist (e.g., openSUS...

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2018-1000127

The CVE-2018-1000127 issue affects memcached prior to 1.4.37, caused by an Integer Overflow in items.c:item_free() that can lead to data corruption and deadlocks due to reusing hash-table entries from a free list. It is exploitable over the network to the memcached service. The vulnerability is f...

CVE-2018-14368

Wireshark's Bazaar protocol dissector (CVE-2018-14368) could enter an infinite loop in Wireshark versions 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15 due to how items were handled when they were too long. The root cause is described as improper handling of overly long items, and the issue was fixe...

CVE-2018-2678

CVE-2018-2678 affects Oracle Java SE family (Java SE, Java SE Embedded, JRockit) with vulnerable JNDI component. Affected: Java 6u171, 7u161, 8u152, 9.0.1; Java SE Embedded 8u151; JRockit R28.3.16. Description indicates unauthenticated network access could lead to a partial denial of service via ...

CVE-2019-14271

CVE-2019-14271 affects Docker 19.03.x (before 19.03.1) where, when glibc is linked, code injection can occur as the nsswitch facility dynamically loads a library inside a chroot containing the container contents. This is a container-escape risk with network-attack vector observed in the descripti...

CVE-2020-0009

CVE-2020-0009 affects the Android kernel ashmem.c (calc_vm_may_flags): an insecure permissions bypass can allow an arbitrary write to shared memory, enabling local privilege escalation by corrupting inter-process memory. Exploitation is possible without user interaction, and no additional executi...

CVE-2020-10685

CVE-2020-10685 affects Ansible Engine versions 2.7.x before 2.7.17, 2.8.x before 2.8.11, 2.9.x before 2.9.7, and Ansible Tower up to 3.6.3, when using vault-decrypting modules (assemble, script, unarchive, win_copy, aws_s3, copy). A temporary directory is created in /tmp and left unencrypted; on ...

CVE-2020-14365

CVE-2020-14365 affects the Ansible Engine (ansible-engine 2.8.x before 2.8.15; 2.9.x before 2.9.13). When using the dnf module, GPG signatures are ignored during installation if disable_gpg_check is False, allowing potentially malicious packages to be installed and their installation scripts to e...

CVE-2020-25653

CVE-2020-25653 describes a race-condition in spice-vdagentd that can let an unprivileged local guest user hijack the active agent via new UNIX socket connections, risking DoS or host data leakage. Affected: spice-vdagentd/spice-vdagent (v0.20 and earlier). Connected advisories/vendor notes consis...

CVE-2020-28037

CVE-2020-28037 affects WordPress prior to 5.5.2. The vulnerability lies in is_blog_installed in wp-includes/functions.php, which can misclassify a new installation and allow an attacker to perform a fresh install, potentially leading to remote code execution and DoS on the old installation. Affec...

CVE-2020-8167

The CVE-2020-8167 issue is a CSRF vulnerability in Rails UJS (Rails UJS) affecting Rails up to 6.0.3. If an attacker can control the href of a link or the action of a form, they can cause the CSRF token to be sent to a cross‑origin URL, potentially leaking tokens. Remediation: upgrade Rails to Ra...

CVE-2021-21161

CVE-2021-21161 is a reported heap buffer overflow in the Chromium browser’s TabStrip component, fixed in versions before 89.0.4389.72 (vulnerable prior to that update). The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. In practice, updates to Chromiu...

CVE-2021-21185

CVE-2021-21185 affects the Chromium browser (Extensions component) with a policy enforcement issue that could allow a user-targeted attacker who lures a user into installing a malicious extension to exfiltrate sensitive information. The Debian advisories list this CVE among multiple Chromium fixe...

CVE-2022-23036

The Connected Astra Linux entries provide concrete details for CVEs 2022-23036 to 2022-23042 and related entries, describing a shared vulnerability class in Linux PV device frontends. Specifically, blkfront, netfront, scsifront, and the gntalloc driver use grant-table interfaces to remove backend...

CVE-2022-27377

CVE-2022-27377 affects MariaDB Server 10.6.3 and earlier, due to a use-after-free in Item_func_in::cleanup() that can be triggered by specially crafted SQL statements. The connected advisories/notes confirm this CVE is linked to MariaDB server crashes/use-after-free scenarios and are part of broa...

CVE-2022-31799

Bottle before 0.12.20 mishandles errors during early request binding, exposing a vulnerability that can disclose sensitive information. Public advisories confirm affected software: python-bottle up to 0.12.19/0.12.20. Debian security notes (DSA and DLA) describe the issue and recommend upgrading ...

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...

CVE-2023-4903

CVE-2023-4903 concerns Google Chrome on Android before 117.0.5938.62, where Inappropriate implementation in Custom Mobile Tabs allowed a remote attacker to spoof security UI via a crafted HTML page. The linked sources confirm this is a Chromium-derived issue affecting Chrome/Chromium and related ...

CVE-2024-26733

CVE-2024-26733 (Linux kernel) : A heap-based buffer overflow in arp_req_get() was fixed. The issue occurs when ioctl(SIOCGARP) copies neigh->ha into arpreq.arp_ha.sa_data (14-byte sockaddr) with a 14-byte copy, risking overflow into arp_flags and overwriting arp_netmask if dev->addr_len exc...

CVE-2014-3616

CVE-2014-3616 affects nginx versions 0.5.6 through 1.7.4. The root cause is reuse of a shared SSL session cache or SSL session_ticket_key for multiple servers, allowing a remote attacker with sufficient privileges to perform a virtual host confusion by reusing a cached SSL session in an unrelated...

CVE-2016-5421

CVE-2016-5421 is a use-after-free in libcurl up to version 7.50.0 that can affect which connection is used or cause unspecified impact via unknown vectors. Public notes in ALAS-2016-730 (curl) indicate the issue affects curl/libcurl before 7.50.1 and that patches upgrade to 7.50.1 or newer; remed...

CVE-2017-14064

CVE-2017-14064 affects Ruby before the fixed versions: Ruby 2.2.7 and earlier (2.2.x), 2.3.0–2.3.4, and 2.4.0–2.4.1. Root cause is a strdup-based bug in ext/json/ext/generator/generator.c that stops at the first NUL byte, returning a string of length zero while space_len indicates otherwise, expo...

CVE-2017-14633

CVE-2017-14633 : In Xiph.Org libvorbis 1.3.5, there is an out-of-bounds array read in mapping0_forward() of mapping0.c that may cause a denial of service when processing a crafted audio file with vorbis_analysis(). The issue is fixed upstream in libvorbis 1.3.6. Public advisories across distribut...