NVD update 2026-11-12T00:47:51Z
This commit is contained in:
Vulnerability Bot
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netaxis:api_orchestrator:*:*:*:*:*:*:*:*","matchCriteriaId":"12A3E8F5-1ADF-4DED-B338-371F782DDCC8","versionEndExcluding":"0.19.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI)."}],"id":"CVE-2022-23851","lastModified":"2026-06-17T04:30:52.923","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-23851","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-12-17T15:48:34.583321Z","version":"2.0.3"}}]},"published":"2025-12-17T15:15:48.387","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://blog.tig00r.me/post/CVE-2022-23851"},{"source":"cve@mitre.org","tags":["Product"],"url":"https://www.netaxis.be/products/apio/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-1336"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netaxis:api_orchestrator:*:*:*:*:*:*:*:*","matchCriteriaId":"12A3E8F5-1ADF-4DED-B338-371F782DDCC8","versionEndExcluding":"0.19.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI)."},{"lang":"es","value":"Netaxis API Orchestrator (APIO) antes de 0.19.3 permite inyección de plantillas del lado del servidor (SSTI)."}],"id":"CVE-2022-23851","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-23851","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-12-17T15:48:34.583321Z","version":"2.0.3"}}]},"published":"2025-12-17T15:15:48.387","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://blog.tig00r.me/post/CVE-2022-23851"},{"source":"cve@mitre.org","tags":["Product"],"url":"https://www.netaxis.be/products/apio/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-1336"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nokia:broadcast_message_center:*:*:*:*:*:*:*:*","matchCriteriaId":"CBA2333F-E79A-458C-BA94-9FDDA5AD61E4","versionEndExcluding":"13.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field."}],"id":"CVE-2022-45899","lastModified":"2026-08-12T15:36:13.820","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-45899","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-08T13:47:21.855358Z","version":"2.0.3"}}]},"published":"2026-05-08T05:16:09.183","references":[{"source":"cve@mitre.org","tags":["Not Applicable"],"url":"https://nokia.com"},{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://www.exploit-db.com/exploits/51896"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://www.exploit-db.com/exploits/51896"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nokia:broadcast_message_center:*:*:*:*:*:*:*:*","matchCriteriaId":"CBA2333F-E79A-458C-BA94-9FDDA5AD61E4","versionEndExcluding":"13.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field."},{"lang":"es","value":"Nokia Broadcast Message Center (BMC) antes de la versión 13.1 permite a un atacante remoto no autenticado realizar una inyección de comandos del sistema operativo como root a través de metacaracteres de shell en el campo ’Log Scanner Search Pattern’."}],"id":"CVE-2022-45899","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-45899","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-08T13:47:21.855358Z","version":"2.0.3"}}]},"published":"2026-05-08T05:16:09.183","references":[{"source":"cve@mitre.org","tags":["Not Applicable"],"url":"https://nokia.com"},{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://www.exploit-db.com/exploits/51896"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://www.exploit-db.com/exploits/51896"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"jet-form-builder-stripe-gateway","vendor":"Unknown","versions":[{"lessThan":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to extract arbitrary data from the database, including password hashes."}],"id":"CVE-2022-4997","lastModified":"2026-09-23T18:13:31.210","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4997","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-23T10:44:01.446471Z","version":"2.0.3"}}]},"published":"2026-09-23T06:16:59.060","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/368c38af-66c3-4500-ad50-87ada3abecd1/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"jet-form-builder-stripe-gateway","vendor":"Unknown","versions":[{"lessThan":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to extract arbitrary data from the database, including password hashes."},{"lang":"es","value":"La extensión de WordPress jet-form-builder-stripe-gateway antes de la versión 1.1.0 no sanitiza ni escape un token de pago antes de utilizarlo en una sentencia SQL, lo que permite a los usuarios no autenticados extraer datos arbitrarios de la base de datos, incluyendo hashes de contraseñas."}],"id":"CVE-2022-4997","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4997","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-23T10:44:01.446471Z","version":"2.0.3"}}]},"published":"2026-09-23T06:16:59.060","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/368c38af-66c3-4500-ad50-87ada3abecd1/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1caed03305b560bafea8eaa57f1847791658b3ff","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"7cb8932644438bee992dc898a36ffe155fdc1bfa","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"1c65f8f98148709e08bd6157a807c443ba91f0ac","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"8f8033d5663b18e6efb33feb61f2287a04605ab5","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.86","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/powerplay/psm: Fix memory leak in power state init\n\nCommit 902bc65de0b3 (\"drm/amdgpu/powerplay/psm: return an error in power\nstate init\") made the power state init function return early in case of\nfailure to get an entry from the powerplay table, but it missed to clean up\nthe allocated memory for the current power state before returning."}],"id":"CVE-2022-50617","lastModified":"2026-06-17T05:23:52.530","metrics":{},"published":"2025-12-08T02:15:47.457","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1c65f8f98148709e08bd6157a807c443ba91f0ac"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1caed03305b560bafea8eaa57f1847791658b3ff"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/7cb8932644438bee992dc898a36ffe155fdc1bfa"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/8f8033d5663b18e6efb33feb61f2287a04605ab5"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1caed03305b560bafea8eaa57f1847791658b3ff","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"7cb8932644438bee992dc898a36ffe155fdc1bfa","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"1c65f8f98148709e08bd6157a807c443ba91f0ac","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"},{"lessThan":"8f8033d5663b18e6efb33feb61f2287a04605ab5","status":"affected","version":"902bc65de0b3d72c481b45cbac3e97ab8cb399c2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.86","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/powerplay/psm: Fix memory leak in power state init\n\nCommit 902bc65de0b3 (\"drm/amdgpu/powerplay/psm: return an error in power\nstate init\") made the power state init function return early in case of\nfailure to get an entry from the powerplay table, but it missed to clean up\nthe allocated memory for the current power state before returning."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdgpu/powerplay/psm: Corrección de fuga de memoria en la inicialización del estado de energía\n\nEl commit 902bc65de0b3 (’drm/amdgpu/powerplay/psm: devolver un error en la inicialización del estado de energía’) hizo que la función de inicialización del estado de energía retornara anticipadamente en caso de fallo al obtener una entrada de la tabla powerplay, pero omitió limpiar la memoria asignada para el estado de energía actual antes de retornar."}],"id":"CVE-2022-50617","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:47.457","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1c65f8f98148709e08bd6157a807c443ba91f0ac"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1caed03305b560bafea8eaa57f1847791658b3ff"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/7cb8932644438bee992dc898a36ffe155fdc1bfa"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/8f8033d5663b18e6efb33feb61f2287a04605ab5"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mmc/host/meson-gx-mmc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f5506e0bbb25102bd8ef2e1a3b483a0b934e454e","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"9e11c6bb745be4e9b325cf96031b4ea34801342d","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"64b2c441171febf075bd9632aca579afda8ab9fb","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"e0cfe7aa41f3965f5224affd88afd48c60f6ad1f","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"42343e3c6195e934b9cb4c08b7ff84a3778d77f9","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"f5ce76aeddf01ca8f2a80fc37119388d59db7c10","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mmc/host/meson-gx-mmc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.10"},{"lessThan":"4.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.270","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.229","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.163","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.86","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: meson-gx: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n delete device, but it's not added yet, it will lead a kernel\n crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host()."}],"id":"CVE-2022-50618","lastModified":"2026-06-17T05:23:52.630","metrics":{},"published":"2025-12-08T02:15:47.590","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/42343e3c6195e934b9cb4c08b7ff84a3778d77f9"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/64b2c441171febf075bd9632aca579afda8ab9fb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9e11c6bb745be4e9b325cf96031b4ea34801342d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/e0cfe7aa41f3965f5224affd88afd48c60f6ad1f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f5506e0bbb25102bd8ef2e1a3b483a0b934e454e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f5ce76aeddf01ca8f2a80fc37119388d59db7c10"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mmc/host/meson-gx-mmc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f5506e0bbb25102bd8ef2e1a3b483a0b934e454e","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"9e11c6bb745be4e9b325cf96031b4ea34801342d","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"64b2c441171febf075bd9632aca579afda8ab9fb","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"e0cfe7aa41f3965f5224affd88afd48c60f6ad1f","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"42343e3c6195e934b9cb4c08b7ff84a3778d77f9","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"f5ce76aeddf01ca8f2a80fc37119388d59db7c10","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"},{"lessThan":"90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e","status":"affected","version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mmc/host/meson-gx-mmc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.10"},{"lessThan":"4.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.270","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.229","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.163","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.86","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: meson-gx: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n delete device, but it's not added yet, it will lead a kernel\n crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host()."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmmc: meson-gx: corregir la verificación del valor de retorno de mmc_add_host()\n\nmmc_add_host() puede devolver un error; si ignoramos su valor de retorno, esto conducirá a dos problemas:\n1. La memoria que se asignó en mmc_alloc_host() se filtra.\n2. En la ruta de remove(), se llamará a mmc_remove_host() para eliminar el dispositivo, pero aún no se ha añadido, lo que conducirá a un fallo del kernel debido a una desreferencia de puntero nulo en device_del().\n\nSolucione esto verificando el valor de retorno y yendo a la ruta de error que llamará a mmc_free_host()."}],"id":"CVE-2022-50618","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:47.590","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/42343e3c6195e934b9cb4c08b7ff84a3778d77f9"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/64b2c441171febf075bd9632aca579afda8ab9fb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9e11c6bb745be4e9b325cf96031b4ea34801342d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/e0cfe7aa41f3965f5224affd88afd48c60f6ad1f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f5506e0bbb25102bd8ef2e1a3b483a0b934e454e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f5ce76aeddf01ca8f2a80fc37119388d59db7c10"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"304a10161696d86300ceab1cbe72b2d74b8cdd94","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"},{"lessThan":"c6dc4c9ba093829ebe1450d5fb101da6fb7a2a58","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"},{"lessThan":"90bfee142af0f0e9d3bec80e7acd5f49b230acf7","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.77","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()\n\nIf the number of pages from the userptr BO differs from the SG BO then the\nallocated memory for the SG table doesn't get freed before returning\n-EINVAL, which may lead to a memory leak in some error paths. Fix this by\nchecking the number of pages before allocating memory for the SG table."}],"id":"CVE-2022-50619","lastModified":"2026-06-17T05:23:52.740","metrics":{},"published":"2025-12-08T02:15:47.727","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/304a10161696d86300ceab1cbe72b2d74b8cdd94"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/90bfee142af0f0e9d3bec80e7acd5f49b230acf7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c6dc4c9ba093829ebe1450d5fb101da6fb7a2a58"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"304a10161696d86300ceab1cbe72b2d74b8cdd94","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"},{"lessThan":"c6dc4c9ba093829ebe1450d5fb101da6fb7a2a58","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"},{"lessThan":"90bfee142af0f0e9d3bec80e7acd5f49b230acf7","status":"affected","version":"264fb4d332f5e76743818480e482464437837c52","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.77","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()\n\nIf the number of pages from the userptr BO differs from the SG BO then the\nallocated memory for the SG table doesn't get freed before returning\n-EINVAL, which may lead to a memory leak in some error paths. Fix this by\nchecking the number of pages before allocating memory for the SG table."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrm/amdkfd: Corrección de fuga de memoria en kfd_mem_dmamap_userptr()\n\nSi el número de páginas del BO userptr difiere del BO SG, entonces la memoria asignada para la tabla SG no se libera antes de devolver -EINVAL, lo que puede provocar una fuga de memoria en algunas rutas de error. Esto se corrige comprobando el número de páginas antes de asignar memoria para la tabla SG."}],"id":"CVE-2022-50619","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:47.727","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/304a10161696d86300ceab1cbe72b2d74b8cdd94"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/90bfee142af0f0e9d3bec80e7acd5f49b230acf7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c6dc4c9ba093829ebe1450d5fb101da6fb7a2a58"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-verity-loadpin.c","drivers/md/dm-verity-target.c","drivers/md/dm-verity.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cb1f5b76e39d86c98722696bdf632987aa777b83","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"916ef6232cc4b84db7082b4c3d3cf1753d9462ba","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/md/dm-verity-loadpin.c","drivers/md/dm-verity-target.c","drivers/md/dm-verity.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm: verity-loadpin: Only trust verity targets with enforcement\n\nVerity targets can be configured to ignore corrupted data blocks.\nLoadPin must only trust verity targets that are configured to\nperform some kind of enforcement when data corruption is detected,\nlike returning an error, restarting the system or triggering a\npanic."}],"id":"CVE-2022-50621","lastModified":"2026-06-17T05:23:52.977","metrics":{},"published":"2025-12-08T02:15:48.000","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/916ef6232cc4b84db7082b4c3d3cf1753d9462ba"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/cb1f5b76e39d86c98722696bdf632987aa777b83"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-verity-loadpin.c","drivers/md/dm-verity-target.c","drivers/md/dm-verity.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cb1f5b76e39d86c98722696bdf632987aa777b83","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"},{"lessThan":"916ef6232cc4b84db7082b4c3d3cf1753d9462ba","status":"affected","version":"b6c1c5745ccc68ac5d57c7ffb51ea25a86d0e97b","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/md/dm-verity-loadpin.c","drivers/md/dm-verity-target.c","drivers/md/dm-verity.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm: verity-loadpin: Only trust verity targets with enforcement\n\nVerity targets can be configured to ignore corrupted data blocks.\nLoadPin must only trust verity targets that are configured to\nperform some kind of enforcement when data corruption is detected,\nlike returning an error, restarting the system or triggering a\npanic."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndm: verity-loadpin: Solo confiar en objetivos de verity con aplicación\n\nLos objetivos de verity pueden configurarse para ignorar bloques de datos corruptos. LoadPin solo debe confiar en objetivos de verity que están configurados para realizar algún tipo de aplicación cuando se detecta corrupción de datos, como devolver un error, reiniciar el sistema o desencadenar un pánico."}],"id":"CVE-2022-50621","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:48.000","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/916ef6232cc4b84db7082b4c3d3cf1753d9462ba"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/cb1f5b76e39d86c98722696bdf632987aa777b83"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ext4/fast_commit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c9ce7766dc4e88e624c62a68221a3bbe8f06e856","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"c0be17635f039f864b1108efec0015c73736e414","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"24d39affc6be1acf6df86a8c3e2413b8a73749c7","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"9305721a309fa1bd7c194e0d4a2335bf3b29dca4","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ext4/fast_commit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.150","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.75","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.17","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix potential memory leak in ext4_fc_record_modified_inode()\n\nAs krealloc may return NULL, in this case 'state->fc_modified_inodes'\nmay not be freed by krealloc, but 'state->fc_modified_inodes' already\nset NULL. Then will lead to 'state->fc_modified_inodes' memory leak."}],"id":"CVE-2022-50622","lastModified":"2026-06-17T05:23:53.100","metrics":{},"published":"2025-12-08T02:15:48.120","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/24d39affc6be1acf6df86a8c3e2413b8a73749c7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9305721a309fa1bd7c194e0d4a2335bf3b29dca4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c0be17635f039f864b1108efec0015c73736e414"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c9ce7766dc4e88e624c62a68221a3bbe8f06e856"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ext4/fast_commit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c9ce7766dc4e88e624c62a68221a3bbe8f06e856","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"c0be17635f039f864b1108efec0015c73736e414","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"24d39affc6be1acf6df86a8c3e2413b8a73749c7","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"},{"lessThan":"9305721a309fa1bd7c194e0d4a2335bf3b29dca4","status":"affected","version":"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["fs/ext4/fast_commit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.150","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.75","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.17","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix potential memory leak in ext4_fc_record_modified_inode()\n\nAs krealloc may return NULL, in this case 'state->fc_modified_inodes'\nmay not be freed by krealloc, but 'state->fc_modified_inodes' already\nset NULL. Then will lead to 'state->fc_modified_inodes' memory leak."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\next4: corrección de una posible fuga de memoria en ext4_fc_record_modified_inode()\n\nDado que krealloc puede devolver NULL, en este caso ’state -> fc_modified_inodes’ puede no ser liberado por krealloc, pero ’state -> fc_modified_inodes’ ya se estableció en NULL. Esto conducirá a una fuga de memoria de ’state -> fc_modified_inodes’."}],"id":"CVE-2022-50622","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:48.120","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/24d39affc6be1acf6df86a8c3e2413b8a73749c7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9305721a309fa1bd7c194e0d4a2335bf3b29dca4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c0be17635f039f864b1108efec0015c73736e414"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c9ce7766dc4e88e624c62a68221a3bbe8f06e856"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/socionext/netsec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"728884b22d83148a330b23f9472f1e118b589211","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"fda2d07234a21be4d71ebfe97a45f499726902d6","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"62f0a08e82a6312efd7df7f595c0b11d4ffde610","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"1e0bee973ef6fc3c1e3acb014515eaea37c8fa17","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"846e677daf51220d7975c61a20e440a88473951e","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"94423589689124e8cd145b38a1034be7f25835b2","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/socionext/netsec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.16"},{"lessThan":"4.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.264","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.223","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.153","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.77","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netsec: fix error handling in netsec_register_mdio()\n\nIf phy_device_register() fails, phy_device_free() need be called to\nput refcount, so memory of phy device and device name can be freed\nin callback function.\n\nIf get_phy_device() fails, mdiobus_unregister() need be called,\nor it will cause warning in mdiobus_free() and kobject is leaked."}],"id":"CVE-2022-50624","lastModified":"2026-06-17T05:23:53.320","metrics":{},"published":"2025-12-08T02:15:48.377","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1e0bee973ef6fc3c1e3acb014515eaea37c8fa17"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/62f0a08e82a6312efd7df7f595c0b11d4ffde610"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/728884b22d83148a330b23f9472f1e118b589211"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/846e677daf51220d7975c61a20e440a88473951e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/94423589689124e8cd145b38a1034be7f25835b2"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/fda2d07234a21be4d71ebfe97a45f499726902d6"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/socionext/netsec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"728884b22d83148a330b23f9472f1e118b589211","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"fda2d07234a21be4d71ebfe97a45f499726902d6","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"62f0a08e82a6312efd7df7f595c0b11d4ffde610","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"1e0bee973ef6fc3c1e3acb014515eaea37c8fa17","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"846e677daf51220d7975c61a20e440a88473951e","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"},{"lessThan":"94423589689124e8cd145b38a1034be7f25835b2","status":"affected","version":"533dd11a12f698c571a12271b20f235792d3e148","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/socionext/netsec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.16"},{"lessThan":"4.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.264","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.223","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.153","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.77","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netsec: fix error handling in netsec_register_mdio()\n\nIf phy_device_register() fails, phy_device_free() need be called to\nput refcount, so memory of phy device and device name can be freed\nin callback function.\n\nIf get_phy_device() fails, mdiobus_unregister() need be called,\nor it will cause warning in mdiobus_free() and kobject is leaked."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet: netsec: corregir el manejo de errores en netsec_register_mdio()\n\nSi phy_device_register() falla, phy_device_free() debe ser llamada para disminuir el contador de referencias, de modo que la memoria del dispositivo phy y el nombre del dispositivo puedan ser liberados en la función de callback.\n\nSi get_phy_device() falla, mdiobus_unregister() debe ser llamada, o causará una advertencia en mdiobus_free() y se producirá una fuga de kobject."}],"id":"CVE-2022-50624","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:48.377","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/1e0bee973ef6fc3c1e3acb014515eaea37c8fa17"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/62f0a08e82a6312efd7df7f595c0b11d4ffde610"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/728884b22d83148a330b23f9472f1e118b589211"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/846e677daf51220d7975c61a20e440a88473951e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/94423589689124e8cd145b38a1034be7f25835b2"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/fda2d07234a21be4d71ebfe97a45f499726902d6"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/rsi/rsi_91x_coex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"98259e0b6cf7f021da9fe4e11fbcce6ad6705ffe","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"fe4d7280cf4ddbea6536b596297c07662c7856fc","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"efc8df970561ff708379b89b348e16d3b410cc7b","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"b56e60b3b158a93bc713437e8e466f401ff8cc9f","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"c4f1ded67a90fb3b2e679e2c90b78921d9246044","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"ace789b1d465fae104cd37e49f6e1bcd1c8ff417","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"956fb851a6e19da5ab491e19c1bc323bb2c2cf6f","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/rsi/rsi_91x_coex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.17"},{"lessThan":"4.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.276","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.235","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.173","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.99","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.16","versionType":"semver"},{"lessThanOrEqual":"6.2.*","status":"unaffected","version":"6.2.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.3","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: Fix memory leak in rsi_coex_attach()\n\nThe coex_cb needs to be freed when rsi_create_kthread() failed in\nrsi_coex_attach()."}],"id":"CVE-2022-50629","lastModified":"2026-06-17T05:23:53.890","metrics":{},"published":"2025-12-08T02:15:49.063","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/956fb851a6e19da5ab491e19c1bc323bb2c2cf6f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/98259e0b6cf7f021da9fe4e11fbcce6ad6705ffe"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/ace789b1d465fae104cd37e49f6e1bcd1c8ff417"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/b56e60b3b158a93bc713437e8e466f401ff8cc9f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c4f1ded67a90fb3b2e679e2c90b78921d9246044"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/efc8df970561ff708379b89b348e16d3b410cc7b"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/fe4d7280cf4ddbea6536b596297c07662c7856fc"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/rsi/rsi_91x_coex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"98259e0b6cf7f021da9fe4e11fbcce6ad6705ffe","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"fe4d7280cf4ddbea6536b596297c07662c7856fc","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"efc8df970561ff708379b89b348e16d3b410cc7b","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"b56e60b3b158a93bc713437e8e466f401ff8cc9f","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"c4f1ded67a90fb3b2e679e2c90b78921d9246044","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"ace789b1d465fae104cd37e49f6e1bcd1c8ff417","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"},{"lessThan":"956fb851a6e19da5ab491e19c1bc323bb2c2cf6f","status":"affected","version":"2108df3c4b1856588ca2e7f641900c2bbf38467e","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/rsi/rsi_91x_coex.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.17"},{"lessThan":"4.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.276","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.235","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.173","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.99","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.16","versionType":"semver"},{"lessThanOrEqual":"6.2.*","status":"unaffected","version":"6.2.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.3","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: Fix memory leak in rsi_coex_attach()\n\nThe coex_cb needs to be freed when rsi_create_kthread() failed in\nrsi_coex_attach()."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: rsi: Corrección de fuga de memoria en rsi_coex_attach()\n\nEl coex_cb necesita ser liberado cuando rsi_create_kthread() falló en rsi_coex_attach()."}],"id":"CVE-2022-50629","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-08T02:15:49.063","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/956fb851a6e19da5ab491e19c1bc323bb2c2cf6f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/98259e0b6cf7f021da9fe4e11fbcce6ad6705ffe"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/ace789b1d465fae104cd37e49f6e1bcd1c8ff417"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/b56e60b3b158a93bc713437e8e466f401ff8cc9f"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c4f1ded67a90fb3b2e679e2c90b78921d9246044"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/efc8df970561ff708379b89b348e16d3b410cc7b"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/fe4d7280cf4ddbea6536b596297c07662c7856fc"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/riscv/include/asm/kexec.h","arch/riscv/kernel/elf_kexec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c66ad198b6497dee8f45d7ed5c03629c4525c7d0","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"},{"lessThan":"dc387c34d8dd10b02a333df098f8fd9bba177a45","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"},{"lessThan":"96df59b1ae23f5c11698c3c2159aeb2ecd4944a4","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["arch/riscv/include/asm/kexec.h","arch/riscv/kernel/elf_kexec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.18","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: kexec: Fix memory leak of fdt buffer\n\nThis is reported by kmemleak detector:\n\nunreferenced object 0xff60000082864000 (size 9588):\n comm \"kexec\", pid 146, jiffies 4294900634 (age 64.788s)\n hex dump (first 32 bytes):\n d0 0d fe ed 00 00 12 ed 00 00 00 48 00 00 11 40 ...........H...@\n 00 00 00 28 00 00 00 11 00 00 00 02 00 00 00 00 ...(............\n backtrace:\n [<00000000f95b17c4>] kmemleak_alloc+0x34/0x3e\n [<00000000b9ec8e3e>] kmalloc_order+0x9c/0xc4\n [<00000000a95cf02e>] kmalloc_order_trace+0x34/0xb6\n [<00000000f01e68b4>] __kmalloc+0x5c2/0x62a\n [<000000002bd497b2>] kvmalloc_node+0x66/0xd6\n [<00000000906542fa>] of_kexec_alloc_and_setup_fdt+0xa6/0x6ea\n [<00000000e1166bde>] elf_kexec_load+0x206/0x4ec\n [<0000000036548e09>] kexec_image_load_default+0x40/0x4c\n [<0000000079fbe1b4>] sys_kexec_file_load+0x1c4/0x322\n [<0000000040c62c03>] ret_from_syscall+0x0/0x2\n\nIn elf_kexec_load(), a buffer is allocated via kvmalloc() to store fdt.\nWhile it's not freed back to system when kexec kernel is reloaded or\nunloaded. Then memory leak is caused. Fix it by introducing riscv\nspecific function arch_kimage_file_post_load_cleanup(), and freeing the\nbuffer there."}],"id":"CVE-2022-50631","lastModified":"2026-06-17T05:23:54.080","metrics":{},"published":"2025-12-09T01:16:44.490","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/96df59b1ae23f5c11698c3c2159aeb2ecd4944a4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c66ad198b6497dee8f45d7ed5c03629c4525c7d0"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/dc387c34d8dd10b02a333df098f8fd9bba177a45"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/riscv/include/asm/kexec.h","arch/riscv/kernel/elf_kexec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c66ad198b6497dee8f45d7ed5c03629c4525c7d0","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"},{"lessThan":"dc387c34d8dd10b02a333df098f8fd9bba177a45","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"},{"lessThan":"96df59b1ae23f5c11698c3c2159aeb2ecd4944a4","status":"affected","version":"6261586e0c91db14c34f894f4bc48f2300cff1d4","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["arch/riscv/include/asm/kexec.h","arch/riscv/kernel/elf_kexec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.18","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: kexec: Fix memory leak of fdt buffer\n\nThis is reported by kmemleak detector:\n\nunreferenced object 0xff60000082864000 (size 9588):\n comm \"kexec\", pid 146, jiffies 4294900634 (age 64.788s)\n hex dump (first 32 bytes):\n d0 0d fe ed 00 00 12 ed 00 00 00 48 00 00 11 40 ...........H...@\n 00 00 00 28 00 00 00 11 00 00 00 02 00 00 00 00 ...(............\n backtrace:\n [<00000000f95b17c4>] kmemleak_alloc+0x34/0x3e\n [<00000000b9ec8e3e>] kmalloc_order+0x9c/0xc4\n [<00000000a95cf02e>] kmalloc_order_trace+0x34/0xb6\n [<00000000f01e68b4>] __kmalloc+0x5c2/0x62a\n [<000000002bd497b2>] kvmalloc_node+0x66/0xd6\n [<00000000906542fa>] of_kexec_alloc_and_setup_fdt+0xa6/0x6ea\n [<00000000e1166bde>] elf_kexec_load+0x206/0x4ec\n [<0000000036548e09>] kexec_image_load_default+0x40/0x4c\n [<0000000079fbe1b4>] sys_kexec_file_load+0x1c4/0x322\n [<0000000040c62c03>] ret_from_syscall+0x0/0x2\n\nIn elf_kexec_load(), a buffer is allocated via kvmalloc() to store fdt.\nWhile it's not freed back to system when kexec kernel is reloaded or\nunloaded. Then memory leak is caused. Fix it by introducing riscv\nspecific function arch_kimage_file_post_load_cleanup(), and freeing the\nbuffer there."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nRISC-V: kexec: Corrección de fuga de memoria del búfer fdt\n\nEsto es reportado por el detector kmemleak:\n\nobjeto sin referencia 0x ff60000082864000 (tamaño 9588):\n comm ’kexec’, pid 146, jiffies 4294900634 (antigüedad 64.788s)\n volcado hexadecimal (primeros 32 bytes):\n d0 0d fe ed 00 00 12 ed 00 00 00 48 00 00 11 40 ...........H...@\n 00 00 00 28 00 00 00 11 00 00 00 02 00 00 00 00 ...(............\n rastreo inverso:\n [[00000000f95b17c4]] kmemleak_alloc+0x34/0x3e\n [[00000000b9ec8e3e]] kmalloc_order+0x9c/0xc4\n [[00000000a95cf02e]] kmalloc_order_trace+0x34/0xb6\n [[00000000f01e68b4]] __kmalloc+0x5c2/0x62a\n [[000000002bd497b2]] kvmalloc_node+0x66/0xd6\n [[00000000906542fa]] of_kexec_alloc_and_setup_fdt+0xa6/0x6ea\n [[00000000e1166bde]] elf_kexec_load+0x206/0x4ec\n [[0000000036548e09]] kexec_image_load_default+0x40/0x4c\n [[0000000079fbe1b4]] sys_kexec_file_load+0x1c4/0x322\n [[0000000040c62c03]] ret_from_syscall+0x0/0x2\n\nEn elf_kexec_load(), se asigna un búfer mediante kvmalloc() para almacenar fdt. Sin embargo, no se libera de nuevo al sistema cuando el kernel kexec es recargado o descargado. Entonces se causa una fuga de memoria. Se corrige introduciendo la función específica de riscv arch_kimage_file_post_load_cleanup(), y liberando el búfer allí."}],"id":"CVE-2022-50631","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-09T01:16:44.490","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/96df59b1ae23f5c11698c3c2159aeb2ecd4944a4"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/c66ad198b6497dee8f45d7ed5c03629c4525c7d0"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/dc387c34d8dd10b02a333df098f8fd9bba177a45"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/perf/marvell_cn10k_tad_pmu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"367404bfd1aa87b2a50059cd8edc6c12c367cd15","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"},{"lessThan":"7772f4de934123ccd7c7cdc1dc4e46fdd5d767fb","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"},{"lessThan":"973ae93d80d9d262f695eb485a1902b74c4b9098","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/perf/marvell_cn10k_tad_pmu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init()\n\ntad_pmu_init() won't remove the callback added by cpuhp_setup_state_multi()\nwhen platform_driver_register() failed. Remove the callback by\ncpuhp_remove_multi_state() in fail path.\n\nSimilar to the handling of arm_ccn_init() in commit 26242b330093 (\"bus:\narm-ccn: Prevent hotplug callback leak\")"}],"id":"CVE-2022-50632","lastModified":"2026-06-17T05:23:54.173","metrics":{},"published":"2025-12-09T01:16:45.330","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/367404bfd1aa87b2a50059cd8edc6c12c367cd15"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/7772f4de934123ccd7c7cdc1dc4e46fdd5d767fb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/973ae93d80d9d262f695eb485a1902b74c4b9098"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/perf/marvell_cn10k_tad_pmu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"367404bfd1aa87b2a50059cd8edc6c12c367cd15","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"},{"lessThan":"7772f4de934123ccd7c7cdc1dc4e46fdd5d767fb","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"},{"lessThan":"973ae93d80d9d262f695eb485a1902b74c4b9098","status":"affected","version":"036a7584bede317d0df6b854e4f531b7a2dd8b33","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/perf/marvell_cn10k_tad_pmu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init()\n\ntad_pmu_init() won't remove the callback added by cpuhp_setup_state_multi()\nwhen platform_driver_register() failed. Remove the callback by\ncpuhp_remove_multi_state() in fail path.\n\nSimilar to the handling of arm_ccn_init() in commit 26242b330093 (\"bus:\narm-ccn: Prevent hotplug callback leak\")"},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndrivers: perf: marvell_cn10k: Corrección de fuga de callback de hotplug en tad_pmu_init()\n\ntad_pmu_init() no elimina el callback añadido por cpuhp_setup_state_multi() cuando platform_driver_register() falló. Eliminar el callback mediante cpuhp_remove_multi_state() en la ruta de fallo.\n\nSimilar al manejo de arm_ccn_init() en el commit 26242b330093 (’bus: arm-ccn: Prevent hotplug callback leak’)"}],"id":"CVE-2022-50632","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-09T01:16:45.330","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/367404bfd1aa87b2a50059cd8edc6c12c367cd15"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/7772f4de934123ccd7c7cdc1dc4e46fdd5d767fb"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/973ae93d80d9d262f695eb485a1902b74c4b9098"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/dwc3/dwc3-qcom.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f9089b95548f0272e02a89989c511e235561d051","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"56f6de394f0f57928cd401255a5c7866b68a77e3","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"8c39c8d23ff9fb1beb6e16cf0ae929c764538625","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"2f3b51189f7a7be5d822fb8c537d778c57eb9821","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"97a48da1619ba6bd42a0e5da0a03aa490a9496b1","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/dwc3/dwc3-qcom.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.163","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.87","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.17","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init\n\nof_icc_get() alloc resources for path handle, we should release it when not\nneed anymore. Like the release in dwc3_qcom_interconnect_exit() function.\nAdd icc_put() in error handling to fix this."}],"id":"CVE-2022-50633","lastModified":"2026-06-17T05:23:54.257","metrics":{},"published":"2025-12-09T01:16:45.460","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/2f3b51189f7a7be5d822fb8c537d778c57eb9821"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/56f6de394f0f57928cd401255a5c7866b68a77e3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/8c39c8d23ff9fb1beb6e16cf0ae929c764538625"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/97a48da1619ba6bd42a0e5da0a03aa490a9496b1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f9089b95548f0272e02a89989c511e235561d051"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/dwc3/dwc3-qcom.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f9089b95548f0272e02a89989c511e235561d051","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"56f6de394f0f57928cd401255a5c7866b68a77e3","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"8c39c8d23ff9fb1beb6e16cf0ae929c764538625","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"2f3b51189f7a7be5d822fb8c537d778c57eb9821","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"},{"lessThan":"97a48da1619ba6bd42a0e5da0a03aa490a9496b1","status":"affected","version":"bea46b9815154ac47baf16b64022d791a4471375","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/dwc3/dwc3-qcom.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.163","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.87","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.17","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init\n\nof_icc_get() alloc resources for path handle, we should release it when not\nneed anymore. Like the release in dwc3_qcom_interconnect_exit() function.\nAdd icc_put() in error handling to fix this."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nusb: dwc3: qcom: Corrección de fuga de memoria en dwc3_qcom_interconnect_init\n\nof_icc_get() asigna recursos para el manejador de ruta, debemos liberarlos cuando ya no sean necesarios. Como la liberación en la función dwc3_qcom_interconnect_exit(). Añadir icc_put() en el manejo de errores para corregir esto."}],"id":"CVE-2022-50633","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-09T01:16:45.460","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/2f3b51189f7a7be5d822fb8c537d778c57eb9821"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/56f6de394f0f57928cd401255a5c7866b68a77e3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/8c39c8d23ff9fb1beb6e16cf0ae929c764538625"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/97a48da1619ba6bd42a0e5da0a03aa490a9496b1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f9089b95548f0272e02a89989c511e235561d051"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/power/supply/cw2015_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f7e2ba8ed08138102f21f3fe6414498c93177fd8","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"},{"lessThan":"5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"},{"lessThan":"97f2b4ddb0aa700d673691a7d5e44d226d22bab7","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/power/supply/cw2015_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()\n\ncw_bat_probe() calls create_singlethread_workqueue() and not checked the\nret value, which may return NULL. And a null-ptr-deref may happen:\n\ncw_bat_probe()\n create_singlethread_workqueue() # failed, cw_bat->wq is NULL\n queue_delayed_work()\n queue_delayed_work_on()\n __queue_delayed_work() # warning here, but continue\n __queue_work() # access wq->flags, null-ptr-deref\n\nCheck the ret value and return -ENOMEM if it is NULL."}],"id":"CVE-2022-50634","lastModified":"2026-06-17T05:23:54.343","metrics":{},"published":"2025-12-09T01:16:45.590","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/97f2b4ddb0aa700d673691a7d5e44d226d22bab7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f7e2ba8ed08138102f21f3fe6414498c93177fd8"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/power/supply/cw2015_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f7e2ba8ed08138102f21f3fe6414498c93177fd8","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"},{"lessThan":"5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"},{"lessThan":"97f2b4ddb0aa700d673691a7d5e44d226d22bab7","status":"affected","version":"b4c7715c10c106a041b0b3fabd26151c214ea394","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/power/supply/cw2015_battery.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.16","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.2","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.2","versionType":"original_commit_for_fix"}]}],"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()\n\ncw_bat_probe() calls create_singlethread_workqueue() and not checked the\nret value, which may return NULL. And a null-ptr-deref may happen:\n\ncw_bat_probe()\n create_singlethread_workqueue() # failed, cw_bat->wq is NULL\n queue_delayed_work()\n queue_delayed_work_on()\n __queue_delayed_work() # warning here, but continue\n __queue_work() # access wq->flags, null-ptr-deref\n\nCheck the ret value and return -ENOMEM if it is NULL."},{"lang":"es","value":"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npower: supply: cw2015: Corregir posible desreferencia de puntero nulo en cw_bat_probe()\n\ncw_bat_probe() llama a create_singlethread_workqueue() y no verificó el valor de retorno, el cual puede devolver NULL. Y una desreferencia de puntero nulo puede ocurrir:\n\ncw_bat_probe()\n create_singlethread_workqueue() # falló, cw_bat -> wq es NULL\n queue_delayed_work()\n queue_delayed_work_on()\n __queue_delayed_work() # advertencia aquí, pero continúa\n __queue_work() # acceso a wq -> flags, desreferencia de puntero nulo\n\nVerificar el valor de retorno y devolver -ENOMEM si es NULL."}],"id":"CVE-2022-50634","lastModified":"2026-11-11T23:10:00.263","metrics":{},"published":"2025-12-09T01:16:45.590","references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/5150b76aa2eb8bb8feb7f7a048417f9d39c3dd04"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/97f2b4ddb0aa700d673691a7d5e44d226d22bab7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","url":"https://git.kernel.org/stable/c/f7e2ba8ed08138102f21f3fe6414498c93177fd8"}],"sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","vulnStatus":"Deferred"}
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.4.2:*:*:*:*:*:*:*"],"product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","vendor":"IBM","versions":[{"lessThanOrEqual":"4.8.5","status":"affected","version":"4.8.4","versionType":"semver"},{"lessThanOrEqual":"5.4.2","status":"affected","version":"5.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible."}],"id":"CVE-2025-0166","lastModified":"2026-11-09T15:17:04.210","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0166","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T14:14:55.542618Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.597","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293785"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-540"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.4.2:*:*:*:*:*:*:*"],"product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","vendor":"IBM","versions":[{"lessThanOrEqual":"4.8.5","status":"affected","version":"4.8.4","versionType":"semver"},{"lessThanOrEqual":"5.4.2","status":"affected","version":"5.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible."},{"lang":"es","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data, desde la versión 4.8.4 hasta la 4.8.5 incluida, y desde la versión 5.0.0 hasta la 5.4.2 incluida, podría divulgar información sensible del código fuente que no debería ser accesible."}],"id":"CVE-2025-0166","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0166","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T14:14:55.542618Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.597","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293785"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-540"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.4.2:*:*:*:*:*:*:*"],"product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","vendor":"IBM","versions":[{"lessThanOrEqual":"4.8.5","status":"affected","version":"4.8.4","versionType":"semver"},{"lessThanOrEqual":"5.4.2","status":"affected","version":"5.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods."}],"id":"CVE-2025-1837","lastModified":"2026-11-09T17:17:04.760","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1837","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:09:17.662202Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.760","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293785"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-650"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.4.2:*:*:*:*:*:*:*"],"product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","vendor":"IBM","versions":[{"lessThanOrEqual":"4.8.5","status":"affected","version":"4.8.4","versionType":"semver"},{"lessThanOrEqual":"5.4.2","status":"affected","version":"5.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods."},{"lang":"es","value":"IBM watsonx Orchestrate Cartridge para Cloud Pak for Data 4.8.4 hasta la versión 4.8.5 incluida, y 5.0.0 hasta la versión 5.4.2 incluida, podría permitir a un usuario autenticado realizar acciones no autorizadas debido a una confianza inadecuada en los métodos de permiso del lado del servidor."}],"id":"CVE-2025-1837","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1837","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:09:17.662202Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.760","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293785"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-650"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Safer Payments","vendor":"IBM","versions":[{"lessThanOrEqual":"6.4.2.11","status":"affected","version":"6.4.0.00","versionType":"semver"},{"lessThanOrEqual":"6.5.0.09","status":"affected","version":"6.5.0.00","versionType":"semver"},{"lessThanOrEqual":"6.6.0.07","status":"affected","version":"6.6.0.00","versionType":"semver"},{"lessThanOrEqual":"6.7.0.03","status":"affected","version":"6.7.0.00","versionType":"semver"},{"status":"affected","version":"6.8.0.00","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information."}],"id":"CVE-2025-36075","lastModified":"2026-11-09T17:17:04.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-36075","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:10:51.462397Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.930","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293213"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1287"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"Safer Payments","vendor":"IBM","versions":[{"lessThanOrEqual":"6.4.2.11","status":"affected","version":"6.4.0.00","versionType":"semver"},{"lessThanOrEqual":"6.5.0.09","status":"affected","version":"6.5.0.00","versionType":"semver"},{"lessThanOrEqual":"6.6.0.07","status":"affected","version":"6.6.0.00","versionType":"semver"},{"lessThanOrEqual":"6.7.0.03","status":"affected","version":"6.7.0.00","versionType":"semver"},{"status":"affected","version":"6.8.0.00","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information."},{"lang":"es","value":"IBM Safer Payments 6.4.0.00 hasta la versión 6.4.2.11 incluida, 6.5.0.00 hasta la versión 6.5.0.09 incluida, 6.6.0.00 hasta la versión 6.6.0.07 incluida, 6.7.0.00 hasta la versión 6.7.0.03 incluida, y 6.8.0.00 podría permitir a un usuario autenticado obtener información sensible, causado por una validación de entrada de usuario incorrecta. Mediante el uso de un conjunto de solicitudes de API, el usuario podría explotar esta vulnerabilidad para descifrar información sensible."}],"id":"CVE-2025-36075","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-36075","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:10:51.462397Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.930","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293213"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1287"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05_r1b011d88210:*:*:*:*:*:*:*","matchCriteriaId":"6494A725-3860-4428-A0F3-076605CAF7F2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*","matchCriteriaId":"1A3AC507-7219-401E-AC60-12D96382E4B7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated using sprintf() into another 512-byte buffer containing a 29-byte constant. Input exceeding 481 bytes triggers a stack buffer overflow, allowing an attacker who can control /proc/version content to potentially execute arbitrary code on the device."}],"id":"CVE-2025-60679","lastModified":"2026-07-05T02:17:11.747","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-60679","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-11-14T16:40:45.989591Z","version":"2.0.3"}}]},"published":"2025-11-13T20:15:51.420","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-816/CVE-2025-60679.md"},{"source":"cve@mitre.org","tags":["Product"],"url":"https://www.dlink.com/en"},{"source":"cve@mitre.org","tags":["Vendor Advisory"],"url":"https://www.dlink.com/en/security-bulletin/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05_r1b011d88210:*:*:*:*:*:*:*","matchCriteriaId":"6494A725-3860-4428-A0F3-076605CAF7F2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*","matchCriteriaId":"1A3AC507-7219-401E-AC60-12D96382E4B7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated using sprintf() into another 512-byte buffer containing a 29-byte constant. Input exceeding 481 bytes triggers a stack buffer overflow, allowing an attacker who can control /proc/version content to potentially execute arbitrary code on the device."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer de pila existe en el firmware del router D-Link DIR-816A2 DIR-816A2_FWv1.10CNB05_R1B011D88210.img en el módulo upload.cgi, que maneja la información de la versión del firmware. La vulnerabilidad ocurre porque /proc/ version se lee en un búfer de 512 bytes y luego se concatena usando sprintf() en otro búfer de 512 bytes que contiene una constante de 29 bytes. La entrada que excede los 481 bytes desencadena un desbordamiento de búfer de pila, permitiendo a un atacante que puede controlar el contenido de /proc/ version ejecutar potencialmente código arbitrario en el dispositivo."}],"id":"CVE-2025-60679","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-60679","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-11-14T16:40:45.989591Z","version":"2.0.3"}}]},"published":"2025-11-13T20:15:51.420","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-816/CVE-2025-60679.md"},{"source":"cve@mitre.org","tags":["Product"],"url":"https://www.dlink.com/en"},{"source":"cve@mitre.org","tags":["Vendor Advisory"],"url":"https://www.dlink.com/en/security-bulletin/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:leafletjs:leaflet:*:*:*:*:*:node.js:*:*","matchCriteriaId":"840C3800-3D9A-4B7A-96E4-390841CE2AB2","versionEndIncluding":"1.9.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as raw HTML without sanitization, allowing attackers to inject arbitrary JavaScript code through event handler attributes (e.g., <img src=x onerror=\"alert('XSS')\">). When a victim views an affected map popup, the malicious script executes in the context of the victim's browser session."}],"id":"CVE-2025-69993","lastModified":"2026-06-17T10:00:57.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-69993","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-14T17:45:03.459489Z","version":"2.0.3"}}]},"published":"2026-04-14T15:16:25.477","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/PierfrancescoConti/leaflet-cve-2025-69993/blob/main/ADVISORY.md"},{"source":"cve@mitre.org","url":"https://leafletjs.com/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:leafletjs:leaflet:*:*:*:*:*:node.js:*:*","matchCriteriaId":"840C3800-3D9A-4B7A-96E4-390841CE2AB2","versionEndIncluding":"1.9.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as raw HTML without sanitization, allowing attackers to inject arbitrary JavaScript code through event handler attributes (e.g., <img src=x onerror=\"alert('XSS')\">). When a victim views an affected map popup, the malicious script executes in the context of the victim's browser session."},{"lang":"es","value":"Las versiones de Leaflet hasta e incluyendo la 1.9.4 son vulnerables a Cross-site Scripting (XSS) a través del método bindPopup( ). Este método renderiza la entrada proporcionada por el usuario como HTML sin procesar sin sanitización, lo que permite a los atacantes inyectar código JavaScript arbitrario a través de atributos de manejador de eventos (por ejemplo, [img src=x onerror_disabled=“alert( ’XSS’ )”]). Cuando una víctima visualiza una ventana emergente de mapa afectada, el script malicioso se ejecuta en el contexto de la sesión del navegador de la víctima."}],"id":"CVE-2025-69993","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-69993","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-14T17:45:03.459489Z","version":"2.0.3"}}]},"published":"2026-04-14T15:16:25.477","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/PierfrancescoConti/leaflet-cve-2025-69993/blob/main/ADVISORY.md"},{"source":"cve@mitre.org","url":"https://leafletjs.com/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"vtenext","vendor":"vtenext","versions":[{"lessThan":"25.02.2","status":"affected","version":"0","versionType":"custom"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoList JSON parameter. Attackers can induce a logged-in user to submit a crafted POST request with HTML in widgetId keys, executing JavaScript in the victim's vtenext session."}],"id":"CVE-2025-71453","lastModified":"2026-11-05T20:17:36.173","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-71453","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-05T19:14:17.919932Z","version":"2.0.3"}}]},"published":"2026-11-04T21:17:39.657","references":[{"source":"disclosure@vulncheck.com","url":"https://0xbro.red/posts/vtenext-25-02-a-three-way-path-to-rce/"},{"source":"disclosure@vulncheck.com","url":"https://blog.sicuranext.com/vtenext-25-02-a-three-way-path-to-rce/"},{"source":"disclosure@vulncheck.com","url":"https://usermanual.vtenext.com/books/release-notes-history/page/vtenext-25022-release-note"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/vtenext-before-25.02.2-reflected-xss-via-widgetinfolist-in-homewidgetblocklist"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"vtenext","vendor":"vtenext","versions":[{"lessThan":"25.02.2","status":"affected","version":"0","versionType":"custom"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized widgetId keys from the widgetInfoList JSON parameter. Attackers can induce a logged-in user to submit a crafted POST request with HTML in widgetId keys, executing JavaScript in the victim's vtenext session."},{"lang":"es","value":"vtenext versiones anteriores a la 25.02.2 contiene una vulnerabilidad de Cross-site Scripting (XSS) reflejado en modules/Home/HomeWidgetBlockList.php que devuelve claves ’widgetId’ no saneadas del parámetro JSON ’widgetInfoList’. Los atacantes pueden inducir a un usuario autenticado a enviar una solicitud POST manipulada con HTML en las claves ’widgetId’, ejecutando JavaScript en la sesión de vtenext de la víctima."}],"id":"CVE-2025-71453","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-71453","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-05T19:14:17.919932Z","version":"2.0.3"}}]},"published":"2026-11-04T21:17:39.657","references":[{"source":"disclosure@vulncheck.com","url":"https://0xbro.red/posts/vtenext-25-02-a-three-way-path-to-rce/"},{"source":"disclosure@vulncheck.com","url":"https://blog.sicuranext.com/vtenext-25-02-a-three-way-path-to-rce/"},{"source":"disclosure@vulncheck.com","url":"https://usermanual.vtenext.com/books/release-notes-history/page/vtenext-25022-release-note"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/vtenext-before-25.02.2-reflected-xss-via-widgetinfolist-in-homewidgetblocklist"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}],"id":"CVE-2026-107922","lastModified":"2026-11-11T23:17:10.347","metrics":{},"published":"2026-11-11T23:17:10.347","references":[],"sourceIdentifier":"cve@gitlab.com","vulnStatus":"Rejected"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"mutter","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the GNOME session and may allow arbitrary code execution within the compositor process."}],"id":"CVE-2026-108094","lastModified":"2026-11-06T09:16:59.670","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-108094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T18:23:15.091003Z","version":"2.0.3"}}]},"published":"2026-10-12T15:17:07.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-108094"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549511"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.4-6.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"mutter","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the GNOME session and may allow arbitrary code execution within the compositor process."}],"id":"CVE-2026-108094","lastModified":"2026-11-11T23:17:10.430","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-108094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T18:23:15.091003Z","version":"2.0.3"}}]},"published":"2026-10-12T15:17:07.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99130"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-108094"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549511"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-9.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to execute code in the context of the affected application."}],"id":"CVE-2026-119777","lastModified":"2026-11-11T14:17:30.243","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119777","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-30T19:16:55.995158Z","version":"2.0.3"}}]},"published":"2026-10-30T18:17:27.427","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98621"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-119777"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564164"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11241"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-9.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.2"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 10.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-2.el10_2.8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-bad-free","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to execute code in the context of the affected application."}],"id":"CVE-2026-119777","lastModified":"2026-11-11T23:17:10.593","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119777","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-30T19:16:55.995158Z","version":"2.0.3"}}]},"published":"2026-10-30T18:17:27.427","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98621"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99118"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-119777"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564164"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11241"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://github.com/konflux-ci/konflux-ci","defaultStatus":"unaffected","packageName":"konflux-ci","versions":[{"lessThanOrEqual":"0.2.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the Konflux UI proxy. Hostname values defined in the KonfluxUI custom resource are inserted directly into proxy configuration files without adequate validation or sanitization. An authenticated user with permissions to modify the custom resource can inject malicious configuration directives to bypass authentication and authorization controls, potentially exposing internal backend services. In addition, providing malformed input can cause the configuration generator to fail, resulting in a denial of service (DoS) by preventing the proxy from starting."}],"id":"CVE-2026-125637","lastModified":"2026-11-11T23:17:10.750","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-11T23:17:10.750","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125637"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569294"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"secalert@redhat.com","type":"Primary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-8.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory."}],"id":"CVE-2026-125712","lastModified":"2026-11-11T19:17:36.437","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125712","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T16:33:10.793215Z","version":"2.0.3"}}]},"published":"2026-11-10T12:17:18.607","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99012"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125712"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569130"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0030.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-8.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.22.12-10.el9_9.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory."}],"id":"CVE-2026-125712","lastModified":"2026-11-11T23:17:10.893","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125712","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T16:33:10.793215Z","version":"2.0.3"}}]},"published":"2026-11-10T12:17:18.607","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99012"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99126"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125712"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569130"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0030.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*"],"modules":["Web UI"],"product":"Kimi Code","vendor":"Moonshot AI","versions":[{"status":"affected","version":"2.5.0"},{"status":"affected","version":"2.5.1"},{"status":"affected","version":"2.5.2"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security vulnerability has been detected in Moonshot AI Kimi Code up to 2.5.2. This affects the function isOriginAllowed of the file apps/kimi-code/dist-web/assets/index-HU0LCM-X.js of the component Web UI. Such manipulation of the argument kimi_origin leads to open redirect. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-126757","lastModified":"2026-11-11T23:17:11.253","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-11T23:17:11.040","references":[{"source":"cna@vuldb.com","url":"https://mcniyfj5bw9b.feishu.cn/docx/IZ43dY0wzoDtnUxGgy7cQ6xcnFh"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126757"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1033259"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435867"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435867/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"cna@vuldb.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*"],"modules":["WorkspaceDirsService"],"product":"Kimi Code","vendor":"Moonshot AI","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"unaffected","version":"2.1.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.1.0 is able to resolve this issue. Upgrading the affected component is recommended."}],"id":"CVE-2026-126758","lastModified":"2026-11-11T23:17:11.500","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":3.2,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:S/C:N/I:P/A:P","version":"2.0"},"exploitabilityScore":3.1,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":2.5,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.9,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-11T23:17:11.320","references":[{"source":"cna@vuldb.com","url":"https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%402.1.0"},{"source":"cna@vuldb.com","url":"https://mcniyfj5bw9b.feishu.cn/docx/LsJldjpjXomkb4xTJ6CcWzdFnvd"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126758"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1033260"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-807"}],"source":"cna@vuldb.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:h:h3c:icg2000_unified_communication_gateway:*:*:*:*:*:*:*:*"],"modules":["Web Management Module"],"product":"ICG2000 Unified Communication Gateway","vendor":"H3C","versions":[{"status":"affected","version":"2023"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received."}],"id":"CVE-2026-126759","lastModified":"2026-11-12T00:17:14.823","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-12T00:17:14.527","references":[{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126759"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1035822"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435869"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435869/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-306"}],"source":"cna@vuldb.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126840","lastModified":"2026-11-11T23:17:11.670","metrics":{},"published":"2026-11-11T23:17:11.553","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578664961"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126841","lastModified":"2026-11-11T23:17:11.820","metrics":{},"published":"2026-11-11T23:17:11.703","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580865537"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126842","lastModified":"2026-11-11T23:17:11.970","metrics":{},"published":"2026-11-11T23:17:11.860","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574209539"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126843","lastModified":"2026-11-11T23:17:12.110","metrics":{},"published":"2026-11-11T23:17:12.000","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578322433"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126844","lastModified":"2026-11-11T23:17:12.247","metrics":{},"published":"2026-11-11T23:17:12.147","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576944655"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126845","lastModified":"2026-11-11T23:17:12.373","metrics":{},"published":"2026-11-11T23:17:12.277","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574795295"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"}],"id":"CVE-2026-126846","lastModified":"2026-11-11T23:17:12.493","metrics":{},"published":"2026-11-11T23:17:12.403","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580857377"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126847","lastModified":"2026-11-11T23:17:12.623","metrics":{},"published":"2026-11-11T23:17:12.527","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/572988453"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126848","lastModified":"2026-11-11T23:17:12.760","metrics":{},"published":"2026-11-11T23:17:12.650","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578685477"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126849","lastModified":"2026-11-11T23:17:12.907","metrics":{},"published":"2026-11-11T23:17:12.793","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/579313193"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126850","lastModified":"2026-11-11T23:17:13.037","metrics":{},"published":"2026-11-11T23:17:12.937","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580853808"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126851","lastModified":"2026-11-11T23:17:13.170","metrics":{},"published":"2026-11-11T23:17:13.070","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574792758"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126852","lastModified":"2026-11-11T23:17:13.293","metrics":{},"published":"2026-11-11T23:17:13.200","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580846651"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126853","lastModified":"2026-11-11T23:17:13.440","metrics":{},"published":"2026-11-11T23:17:13.327","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/573263421"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126854","lastModified":"2026-11-11T23:17:13.580","metrics":{},"published":"2026-11-11T23:17:13.473","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578655807"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126855","lastModified":"2026-11-11T23:17:13.713","metrics":{},"published":"2026-11-11T23:17:13.610","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/579300424"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126856","lastModified":"2026-11-11T23:17:13.850","metrics":{},"published":"2026-11-11T23:17:13.747","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577260644"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-459"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126857","lastModified":"2026-11-11T23:17:13.977","metrics":{},"published":"2026-11-11T23:17:13.883","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578656869"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126858","lastModified":"2026-11-11T23:17:14.110","metrics":{},"published":"2026-11-11T23:17:14.010","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575937643"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126859","lastModified":"2026-11-11T23:17:14.257","metrics":{},"published":"2026-11-11T23:17:14.153","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/563340397"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126860","lastModified":"2026-11-11T23:17:14.390","metrics":{},"published":"2026-11-11T23:17:14.287","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/581785712"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126861","lastModified":"2026-11-11T23:17:14.523","metrics":{},"published":"2026-11-11T23:17:14.423","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577171064"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: High)"}],"id":"CVE-2026-126862","lastModified":"2026-11-11T23:17:14.650","metrics":{},"published":"2026-11-11T23:17:14.553","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574381704"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126863","lastModified":"2026-11-11T23:17:14.790","metrics":{},"published":"2026-11-11T23:17:14.687","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575312521"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126864","lastModified":"2026-11-11T23:17:14.930","metrics":{},"published":"2026-11-11T23:17:14.820","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/567827593"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126865","lastModified":"2026-11-11T23:17:15.070","metrics":{},"published":"2026-11-11T23:17:14.960","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/573335176"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: High)"}],"id":"CVE-2026-126866","lastModified":"2026-11-11T23:17:15.200","metrics":{},"published":"2026-11-11T23:17:15.103","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576943246"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126867","lastModified":"2026-11-11T23:17:15.323","metrics":{},"published":"2026-11-11T23:17:15.230","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575086736"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126868","lastModified":"2026-11-11T23:17:15.483","metrics":{},"published":"2026-11-11T23:17:15.363","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580867734"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126869","lastModified":"2026-11-11T23:17:15.617","metrics":{},"published":"2026-11-11T23:17:15.517","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575533210"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126870","lastModified":"2026-11-11T23:17:15.750","metrics":{},"published":"2026-11-11T23:17:15.647","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/568906910"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126871","lastModified":"2026-11-11T23:17:15.873","metrics":{},"published":"2026-11-11T23:17:15.780","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574218401"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126872","lastModified":"2026-11-11T23:17:16.010","metrics":{},"published":"2026-11-11T23:17:15.907","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577376424"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126873","lastModified":"2026-11-11T23:17:16.130","metrics":{},"published":"2026-11-11T23:17:16.040","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577336494"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126874","lastModified":"2026-11-11T23:17:16.277","metrics":{},"published":"2026-11-11T23:17:16.163","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576439987"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126875","lastModified":"2026-11-11T23:17:16.413","metrics":{},"published":"2026-11-11T23:17:16.310","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574222006"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126876","lastModified":"2026-11-11T23:17:16.550","metrics":{},"published":"2026-11-11T23:17:16.450","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576664769"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126877","lastModified":"2026-11-11T23:17:16.693","metrics":{},"published":"2026-11-11T23:17:16.580","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577377985"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126878","lastModified":"2026-11-11T23:17:16.830","metrics":{},"published":"2026-11-11T23:17:16.723","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/572312779"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"}],"id":"CVE-2026-126879","lastModified":"2026-11-11T23:17:16.970","metrics":{},"published":"2026-11-11T23:17:16.860","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576736463"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126880","lastModified":"2026-11-11T23:17:17.103","metrics":{},"published":"2026-11-11T23:17:17.007","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577366752"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126881","lastModified":"2026-11-11T23:17:17.240","metrics":{},"published":"2026-11-11T23:17:17.137","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575038730"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-665"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126882","lastModified":"2026-11-11T23:17:17.367","metrics":{},"published":"2026-11-11T23:17:17.270","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578685706"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126883","lastModified":"2026-11-11T23:17:17.493","metrics":{},"published":"2026-11-11T23:17:17.400","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578659604"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126884","lastModified":"2026-11-11T23:17:17.620","metrics":{},"published":"2026-11-11T23:17:17.523","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576949530"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"}],"id":"CVE-2026-126885","lastModified":"2026-11-11T23:17:17.747","metrics":{},"published":"2026-11-11T23:17:17.650","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/568699166"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126886","lastModified":"2026-11-11T23:17:17.880","metrics":{},"published":"2026-11-11T23:17:17.780","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/567611696"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126887","lastModified":"2026-11-11T23:17:18.003","metrics":{},"published":"2026-11-11T23:17:17.907","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/567611698"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126888","lastModified":"2026-11-11T23:17:18.150","metrics":{},"published":"2026-11-11T23:17:18.033","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/577461556"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126889","lastModified":"2026-11-11T23:17:18.277","metrics":{},"published":"2026-11-11T23:17:18.180","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/560620348"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-193"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126890","lastModified":"2026-11-11T23:17:18.420","metrics":{},"published":"2026-11-11T23:17:18.307","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/581629247"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126891","lastModified":"2026-11-11T23:17:18.580","metrics":{},"published":"2026-11-11T23:17:18.460","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575939904"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126892","lastModified":"2026-11-11T23:17:18.733","metrics":{},"published":"2026-11-11T23:17:18.617","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578656065"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126893","lastModified":"2026-11-11T23:17:18.857","metrics":{},"published":"2026-11-11T23:17:18.760","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/579278668"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126894","lastModified":"2026-11-11T23:17:18.993","metrics":{},"published":"2026-11-11T23:17:18.890","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/576950618"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"}],"id":"CVE-2026-126895","lastModified":"2026-11-11T23:17:19.140","metrics":{},"published":"2026-11-11T23:17:19.020","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575524700"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126896","lastModified":"2026-11-11T23:17:19.277","metrics":{},"published":"2026-11-11T23:17:19.170","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/575524702"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126897","lastModified":"2026-11-11T23:17:19.417","metrics":{},"published":"2026-11-11T23:17:19.307","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/578656106"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126898","lastModified":"2026-11-11T23:17:19.563","metrics":{},"published":"2026-11-11T23:17:19.450","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574216555"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126899","lastModified":"2026-11-11T23:17:19.697","metrics":{},"published":"2026-11-11T23:17:19.600","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/583122799"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126900","lastModified":"2026-11-11T23:17:19.823","metrics":{},"published":"2026-11-11T23:17:19.730","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574409610"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126901","lastModified":"2026-11-11T23:17:19.963","metrics":{},"published":"2026-11-11T23:17:19.857","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/579818899"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126902","lastModified":"2026-11-11T23:17:20.100","metrics":{},"published":"2026-11-11T23:17:20.000","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/580867480"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-706"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"157.0.8103.78","status":"affected","version":"157.0.8103.78","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"}],"id":"CVE-2026-126903","lastModified":"2026-11-11T23:17:20.237","metrics":{},"published":"2026-11-11T23:17:20.133","references":[{"source":"chrome-cve-admin@google.com","url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"},{"source":"chrome-cve-admin@google.com","url":"https://issues.chromium.org/issues/574035865"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-754"}],"source":"chrome-cve-admin@google.com","type":"Primary"}]}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user