Browse CVEs

HIGH 8.1 CVE-2026-8796 Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and… Patch available Fix from $1,9502026-05-31 HIGH 7.8 CVE-2026-5071 The SocketCAN implementation validates the length of a user-provided buffer containing a socketcan_frame object using only a NET_ASSERT statement in … Zephyr after 4.3.0 Fix from $1,9502026-05-30 MEDIUM 5.3 CVE-2026-46344 liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds… Liboqs after 0.15.0 Fix from $1,6002026-05-29 MEDIUM 5.3 CVE-2026-44518 liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds… Liboqs after 0.15.0 Fix from $1,6002026-05-29 HIGH 8.2 CVE-2026-45615 mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated … Mitigation only Fix from $1,9502026-05-29 HIGH 7.8 CVE-2025-41278 Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with … Wf 500 Firmware after 7.9.1.0_r2502171040 Fix from $1,9502026-05-29 MEDIUM 6.5 CVE-2026-9996 Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information fr… Chrome 148.0.7778.216+ Fix from $1,6002026-05-28 HIGH 8.3 CVE-2026-9975 Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to … Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 MEDIUM 6.5 CVE-2026-9953 Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from proce… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,6002026-05-28 HIGH 8.8 CVE-2026-9928 Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTM… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-9910 Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox vi… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 MEDIUM 6.5 CVE-2026-9908 Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from proce… Chrome 148.0.7778.216+ Fix from $1,6002026-05-28 HIGH 8.3 CVE-2026-9895 Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9889 Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox e… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 CRITICAL 9.6 CVE-2026-9875 Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via… Chrome 148.0.7778.216+ Fix from $2,3002026-05-28 HIGH 8.3 CVE-2026-10017 Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 7.5 CVE-2026-39929 Lakeside SysTrack Agent versions prior to 11.2.1.28, 11.3.0.38, 11.4.0.24, 11.5.0.15 contain an out-of-bounds read vulnerability in the Command ID 30… Mitigation only Fix from $1,9502026-05-28 HIGH 7.8 CVE-2026-47333 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a … Ubuntu Linux Patch available Fix from $1,9502026-05-28 MEDIUM 5.5 CVE-2026-47332 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-boun… Ubuntu Linux Patch available Fix from $1,6002026-05-28 HIGH 7.1 CVE-2026-46230 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against th… Linux Kernel 5.15.209 / 6.1.175+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46204 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB Rewrite the IB parsing to us… Linux Kernel 6.6.140 / 6.12.90+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46199 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bounds against th… Linux Kernel 6.1.175 / 6.6.140+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46203 In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: fix unclocked access on unbind Make sure that the control… Linux Kernel 7.0.9+ Fix from $1,9502026-05-28 CRITICAL 9.1 CVE-2026-46185 In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_data() Since smb2_check_message()… Linux Kernel 6.1.175 / 6.6.140+ Fix from $2,3002026-05-28 HIGH 7.1 CVE-2026-46190 In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() Sashiko … Linux Kernel 6.6.140 / 6.12.88+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46191 In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if… Linux Kernel 6.6.140 / 6.12.90+ Fix from $1,9502026-05-28 CRITICAL 9.1 CVE-2026-46155 In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a tr… Linux Kernel 6.6.140 / 6.12.88+ Fix from $2,3002026-05-28 HIGH 8.1 CVE-2026-46138 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_comple… Linux Kernel 6.5 / 6.6.140+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46140 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtk_usb_… Linux Kernel 6.7 / 6.12.88+ Fix from $1,9502026-05-28 HIGH 7.1 CVE-2026-46130 In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks (take 3) fec_decode… Linux Kernel 6.2 / 6.7+ Fix from $1,9502026-05-28