2026

Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrar

Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbit

Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user t

Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap

Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows

Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import fea

Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that

Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to

Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation

In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `

### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and

NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment hand

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen

A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbit

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpo

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated,

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to con

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote att

Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Pr

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling

Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allo

Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectl

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma

In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_in

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index to prevent OO

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at

In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clon

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on service

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need to f

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory comp

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access i

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_n

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurr

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa R

In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't us

In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bound

In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handli

In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drm_crtc_com

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decod

In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused b

In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When cancelin

In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS con