Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-13226 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 2025-11-21T01:04:32.000Z | 2026-10-19T01:43:20.000Z |
| msrc_cve-2025-13230 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 2025-11-21T01:04:24.000Z | 2026-10-19T01:43:16.000Z |
| msrc_cve-2024-57843 | virtio-net: fix overflow inside virtnet_rq_alloc | 2025-09-27T01:02:44.000Z | 2026-10-19T01:43:06.000Z |
| msrc_cve-2024-57857 | RDMA/siw: Remove direct link to net_device | 2025-09-04T03:42:28.000Z | 2026-10-19T01:42:58.000Z |
| msrc_cve-2024-56775 | drm/amd/display: Fix handling of plane refcount | 2025-09-03T21:57:30.000Z | 2026-10-19T01:42:51.000Z |
| msrc_cve-2026-109351 | Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count | 2026-10-19T01:01:21.000Z | 2026-10-19T01:01:21.000Z |
| msrc_cve-2026-18540 | undici vulnerable to downstream response splitting via retry interceptor | 2026-09-09T01:03:24.000Z | 2026-10-18T14:44:03.000Z |
| msrc_cve-2026-16729 | undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields | 2026-08-07T01:16:30.000Z | 2026-10-18T14:43:54.000Z |
| msrc_cve-2026-98432 | ipv4: free inet_opt and ireq_opt after an RCU grace period | 2026-10-16T01:07:50.000Z | 2026-10-18T14:43:44.000Z |
| msrc_cve-2026-99999 | ipv4: validate checksum_start before completing checksum | 2026-10-16T01:07:47.000Z | 2026-10-18T14:43:39.000Z |
| msrc_cve-2026-53572 | KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping | 2026-08-23T01:03:01.000Z | 2026-10-18T01:47:30.000Z |
| msrc_cve-2026-13622 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host | 2026-09-09T15:00:35.000Z | 2026-10-18T01:47:26.000Z |
| msrc_cve-2026-71497 | jsoup: Cleaner may expose markup with custom raw-text elements | 2026-08-11T01:03:16.000Z | 2026-10-18T01:47:22.000Z |
| msrc_cve-2026-13201 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption | 2026-06-27T01:05:21.000Z | 2026-10-18T01:47:17.000Z |
| msrc_cve-2026-43969 | Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 | 2026-05-15T01:02:32.000Z | 2026-10-18T01:47:10.000Z |
| msrc_cve-2026-19585 | Go-getter vulnerable to a path traversal in S3/GCS directory download handling | 2026-10-11T02:00:30.000Z | 2026-10-18T01:46:50.000Z |
| msrc_cve-2026-61801 | github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files | 2026-10-11T01:50:24.000Z | 2026-10-18T01:46:45.000Z |
| msrc_cve-2026-107324 | Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver | 2026-10-11T01:59:30.000Z | 2026-10-18T01:46:01.000Z |
| msrc_cve-2026-107325 | Application denial of service via missing BSON array length validation in MongoDB Go Driver | 2026-10-11T01:58:10.000Z | 2026-10-18T01:45:16.000Z |
| msrc_cve-2026-67229 | RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata | 2026-10-03T01:53:41.000Z | 2026-10-18T01:44:58.000Z |
| msrc_cve-2026-66070 | RabbitMQ: CORS * reflects Origin with Allow-Credentials | 2026-10-03T01:53:23.000Z | 2026-10-18T01:44:54.000Z |
| msrc_cve-2026-67235 | RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size | 2026-10-03T01:52:57.000Z | 2026-10-18T01:44:49.000Z |
| msrc_cve-2026-67232 | RabbitMQ: Web-MQTT decompression bomb | 2026-10-03T01:52:31.000Z | 2026-10-18T01:44:44.000Z |
| msrc_cve-2026-67225 | RabbitMQ: Stream-protocol frame length never validated against frame_max | 2026-10-03T01:51:36.000Z | 2026-10-18T01:44:40.000Z |
| msrc_cve-2026-66072 | RabbitMQ: Atom table exhaustion via stream `chunk_selector` | 2026-10-03T01:51:18.000Z | 2026-10-18T01:44:36.000Z |
| msrc_cve-2026-66074 | RabbitMQ: ReDoS via management API ?name= filter | 2026-10-03T01:50:58.000Z | 2026-10-18T01:44:32.000Z |
| msrc_cve-2026-67233 | RabbitMQ: Monitoring-tag user can DELETE shovels | 2026-10-03T01:50:40.000Z | 2026-10-18T01:44:28.000Z |
| msrc_cve-2026-67228 | RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component | 2026-10-03T01:50:22.000Z | 2026-10-18T01:44:24.000Z |
| msrc_cve-2026-66068 | RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs | 2026-10-03T01:49:45.000Z | 2026-10-18T01:44:20.000Z |
| msrc_cve-2026-67226 | RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list | 2026-10-03T01:49:06.000Z | 2026-10-18T01:44:16.000Z |