Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.1Issuing an ICMP ping via the shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue…EPSS 0.1%May 12, 2026
- High7.8libcaca is a colour ASCII art library.May 11, 2026
- Medium6.2An out-of-bounds write issue was addressed with improved bounds checking.May 11, 2026
- High7.3An out-of-bounds write issue was addressed with improved input validation.May 11, 2026
- Medium6.5An out-of-bounds write issue was addressed with improved input validation.May 11, 2026
- Medium6.5A memory corruption issue was addressed with improved input validation.May 11, 2026
- Medium6.5An out-of-bounds access issue was addressed with improved bounds checking.May 11, 2026
- Medium5.4An out-of-bounds write issue was addressed with improved bounds checking.May 11, 2026
- Medium6.4jq is a command-line JSON processor.May 11, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in r…May 11, 2026
- Low2.0A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01.May 11, 2026
- High8.6Pillow is a Python imaging library.May 9, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in SMB2_write() SMB2_write() places write payload i…May 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is…May 8, 2026
- Medium5.9The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames.May 7, 2026
- High8.1Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1.May 7, 2026
- Medium5.4Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.May 7, 2026
- Medium6.8ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB.May 7, 2026
- High8.8Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrar…May 6, 2026
- High8.8Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 6, 2026
- Medium5.4Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic.May 6, 2026
- High8.3Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…May 6, 2026
- High8.8Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 6, 2026
- High8.8Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 6, 2026
- High8.6The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authenticatio…May 6, 2026