@stackflag.bsky.socialCVE-2026-95299 - chromium
The web browsers Chrome and Chromium running on Debian can be tricked by a specially crafted web page to run unwanted code on the computer, bypassing the protective…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-95284 - chromium
A problem in the Chrome browser on Android and the Chromium version used on Debian lets a specially crafted web page cause the browser to run unwanted programs. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-95283 - chromium
The Chrome browser on Android versions earlier than 154 can be tricked by a specially crafted web page to run unwanted programs outside its normal safety limits. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-95281 - chromium
Older versions of Google Chrome for Android (earlier than version 154.0.8037.57) can be tricked by a malicious web page into running code outside its normal protection…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-95277 - chromium
Versions of Chromium on Debian and Google Chrome older than 154.0.8037.57 can be tricked by a crafted web page to run code on the computer, bypassing the normal security…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-13697 - undici
The undici library's shared cache feature can leak private information and crash applications if it receives a malformed cache directive. This issue affects applications using…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-73030 - unearth
The unearth software version 0.18.2 allows attackers to create malicious archives that can write files to any location on the system. This is a security risk because it…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-48188 - znuny
The database component of OTRS and OTRS Community Edition can be tricked into running unwanted commands if the underlying MySQL/MariaDB server uses a specific setting. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-12087 - perl
The Perl and related library packages for Debian (including libsocket-perl and rootio-perl) have a flaw that could allow an attacker to execute commands on your system. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92289 - lemonldap-ng
Versions of Lemonldap‑NG Portal from 2.23.0 up to but not including 2.23.4 can let an attacker swap an authorization code for a user’s access, ID and refresh tokens…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-67239 - rabbitmq-server
If RabbitMQ is set up with a TLS listener that checks client certificates, the stream‑management web page displays the certificate subject and issuer…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-100075 - linux
The Linux kernel’s RDMA subsystem could lose track of how many send‑queue slots are available after an internal allocation error. This miscount can cause the system to think it has…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92288 - lemonldap-ng
Versions of LemonLDAP::NG Portal for Debian and Ubuntu before the latest releases do not verify a client’s secret when checking OAuth2 tokens. This allows someone…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-97413 - linux
The Linux kernel's RDMA rtrs-srv component could be tricked by a malicious client into calculating a negative length, which turns into a huge value and may cause memory over‑read. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-93228 - linux
The Linux operating system could mistakenly accept certain network messages that claim to carry no data. This could let a badly behaved device or attacker send malformed packets that…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-96276 - flatpak
When a developer uses Flatpak’s build command with a specially crafted software development kit, the tool can be tricked into creating or changing files outside the intended…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-86246 - tomcat-native
Apache Tomcat Native versions 1.3.0-1.3.8 and 2.0.0-2.0.15 start with settings that weaken encryption, making connections easier to intercept. This can expose…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-82331 - apache buildstream
The tar handling part of Apache BuildStream may follow symbolic links inside a malicious source archive and create or overwrite files on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachebuildstream #apachefoundation #Debian12 #CVE #infosec
@stackflag.bsky.socialCVE-2026-88807 - libxrender
The libXrender library used by X Window applications can be forced by a compromised X server to write beyond its memory area, allowing attackers to execute their own…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-87080 - libnet-idn-encode-perl
Versions of the Net::IDN::Punycode Perl library older than 2.590 can read a shortened part of a domain name incorrectly and produce a different result than other…
Too many irrelevant or confusing CVEs? Use stackflag.com