Chris Coulson

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

Possible remote DOS in WebApps

GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.

Potential DoS through abuse of rate limit in libunity-webapps for Firefox