2,451 results · Clear filters · Feed
-
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jan 13, 2026 -
High max 8.8USN-7941-1 4 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jan 5, 2026 -
High max 8.8USN-7914-1 10 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Dec 8, 2025 -
High max 7.7USN-7942-1 5 CVEs
glib2.0 vulnerabilities
It was discovered that GLib incorrectly handled escaping URI strings. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-13601) It was discovered that GLib incorrectly parse…
first Jan 6, 2026 -
High max 8.1USN-7837-1 1 CVE
gst-plugins-good1.0 vulnerability
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or disclose sensitive information.
first Oct 22, 2025 -
High max 7.8
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this issue to escalate privileges inside a virtual machine. This update disables the SDMP get-versions.sh script, so version information…
first Sep 29, 2025 -
High max 7.4USN-7761-1 1 CVE
pam vulnerability
It was discovered that the PAM pam_access module incorrectly parsed certain rules as hostnames. An attacker could possibly use this issue to spoof hostnames and bypass access restrictions.
first Sep 22, 2025 -
High max 8.1USN-7717-1 2 CVEs
gst-plugins-good1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly disclose sensitive information.
first Aug 26, 2025 -
High max 7.5USN-7752-1 2 CVEs
libyang2 vulnerabilities
It was discovered that libyang incorrectly handled certain memory operations when parsing YANG strings. An attacker could possibly use this issue to cause libyang to crash, resulting in a denial of service.
first Sep 16, 2025 -
High max 7.4USN-7714-1 2 CVEs
open-vm-tools vulnerabilities
Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059) Dolev Farhi discovered that Open VM …
first Aug 24, 2025 -
High max 8.1USN-7739-1 3 CVEs
bind9 vulnerabilities
Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2021-25214) Siva Kakarla discovered that Bind incorrectly ha…
first Sep 8, 2025 -
High max 8.7USN-7629-1 2 CVEs
protobuf vulnerabilities
It was discovered that Protocol Buffers incorrectly handled memory when receiving malicious input using the Python bindings. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-4565) It was discovered that Protocol Buffers incorr…
first Jul 9, 2025 -
High max 7.8USN-7601-1 4 CVEs
libarchive vulnerabilities
It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2025-5914) It was discovered that libarchive incorrectly handled certain RA…
first Jun 26, 2025 -
High max 8.4USN-7631-1 1 CVE
djvulibre vulnerability
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to stop responding or crash, resulting in a de…
first Jul 9, 2025 -
High max 7.0USN-7577-1 1 CVE
libblockdev vulnerability
It was discovered that libblockdev incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root.
first Jun 18, 2025 -
High max 8.8USN-7566-1 6 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jun 11, 2025 -
High max 7.0USN-7577-2 1 CVE
libblockdev vulnerability
USN-7577-1 fixed a vulnerability in libblockdev. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that libblockdev incorrectly handled mount options when resizing certain fil…
first Jun 18, 2025 -
High max 7.0USN-7578-1 1 CVE
udisks2 vulnerability
It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root.
first Jun 18, 2025 -
High max 7.8USN-7541-1 1 CVE
glibc vulnerability
It was discovered that the GNU C Library incorrectly search LD_LIBRARY_PATH to determine which library to load when statically linked setuid binary calls dlopen. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary …
first May 28, 2025 -
High max 7.0USN-7578-2 1 CVE
udisks2 vulnerability
USN-7578-1 fixed a vulnerability in UDisks. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. …
first Jun 18, 2025 -
High max 8.7USN-7435-1 1 CVE
protobuf vulnerability
It was discovered that Protocol Buffers incorrectly handled memory when receiving malicious input using the Java bindings. An attacker could possibly use this issue to cause a denial of service.
first Apr 14, 2025 -
High max 8.7USN-7414-1 1 CVE
xz-utils vulnerability
Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service,…
first Apr 3, 2025 -
High max 8.4USN-7434-1 1 CVE
perl vulnerability
It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Apr 14, 2025 -
High max 8.1USN-7373-1 1 CVE
exim4 vulnerability
It was discovered that Exim incorrectly handled certain memory operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 26, 2025 -
High max 7.8USN-7357-1 1 CVE
libxslt vulnerability
Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 19, 2025 -
High max 8.1
freetype vulnerability
It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker could use this issue to cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 17, 2025 -
High max 7.2USN-7337-1 1 CVE
libreoffice vulnerability
It was discovered that LibreOffice incorrectly handled Office URI Schemes. If a user or automated system were tricked into opening a specially crafted LibreOffice file, a remote attacker could possibly use this issue to call internal macros.
first Mar 10, 2025 -
High max 7.8USN-7361-1 1 CVE
libxslt vulnerability
Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 20, 2025 -
High max 8.8USN-7279-1 4 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Feb 20, 2025 -
High max 8.1USN-7240-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-49043) It was discovered that the l…
first Jan 29, 2025 -
High max 7.3USN-7087-1 1 CVE
libarchive vulnerability
It was discovered that libarchive incorrectly handled certain RAR archive files. If a user or automated system were tricked into processing a specially crafted RAR archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial o…
first Oct 31, 2024 -
High max 8.1USN-7129-1 1 CVE
TinyGLTF vulnerability
It was discovered that TinyGLTF performed file path expansion in an insecure way on certain inputs. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.
first Nov 26, 2024 -
High max 8.1USN-7082-1 1 CVE
libheif vulnerability
Gerrard Tai discovered that libheif did not properly validate certain images, leading to out-of-bounds read and write vulnerability. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to…
first Oct 23, 2024 -
High max 8.4USN-7103-1 6 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-46951, CVE-2024-46953, CVE-2024-46…
first Nov 12, 2024 -
High max 7.5USN-7049-3 2 CVEs
php5 vulnerabilities
USN-7049-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 14.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled parsing multipart form data.A remote attacker could possibly use this issue…
first Feb 26, 2025 -
High max 7.5USN-7049-1 3 CVEs
php7.4, php8.1, php8.3 vulnerabilities
It was discovered that PHP incorrectly handled parsing multipart form data. A remote attacker could possibly use this issue to inject payloads and cause PHP to ignore legitimate data. (CVE-2024-8925) It was discovered that PHP incorrectly handled the cgi.forc…
first Oct 1, 2024 -
High max 8.6USN-7045-1 1 CVE
libppd vulnerability
Simone Margaritelli discovered that libppd incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
first Sep 26, 2024 -
High max 7.8USN-7025-1 1 CVE
libreoffice vulnerability
It was discovered that LibreOffice would incorrectly handle digital signature verification after repairing a corrupted document. A remote attacker could possibly use this issue to forge valid signatures.
first Sep 19, 2024 -
High max 8.6USN-7043-1 2 CVEs
cups-filters vulnerabilities
Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to …
first Sep 26, 2024 -
High max 8.6USN-7044-1 1 CVE
libcupsfilters vulnerability
Simone Margaritelli discovered that libcupsfilters incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
first Sep 26, 2024