Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.1Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network act…Apr 29, 2026
- High7.8Local privilege escalation due to improper input validation.Apr 29, 2026
- High8.8Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Apr 28, 2026
- High7.3Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0.Apr 28, 2026
- High7.3Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0.Apr 28, 2026
- High7.3The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can re…Apr 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the TH1…Apr 27, 2026
- High7.5Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149.Apr 26, 2026
- High7.5Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149.Apr 26, 2026
- High8.1uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs.Apr 24, 2026
- High7.2rust-openssl provides OpenSSL bindings for the Rust programming language.Apr 24, 2026
- High7.2rust-openssl provides OpenSSL bindings for the Rust programming language.Apr 24, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to…Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SU…Apr 24, 2026
- High8.7OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Apr 24, 2026
- Medium4.0Libgcrypt before 1.12.2 mishandles Dilithium signing.Apr 23, 2026
- Medium6.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.EPSS 0.2%Apr 23, 2026
- Critical9.8Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, L…Apr 22, 2026
- Medium6.9Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through th…EPSS 0.2%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field.EPSS 0.2%Apr 22, 2026
- Medium6.9UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH…EPSS 0.2%Apr 22, 2026
- Medium6.9Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessiv…EPSS 0.2%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exce…EPSS 0.2%Apr 22, 2026
- Medium6.9Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the po…EPSS 0.2%Apr 22, 2026
- High8.6Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitra…EPSS 0.2%Apr 22, 2026