Linux Kernel any version

bandisoft ARK library integer overflow vulnerability

IBM webMethods Integration Sever XML external entity injection

netfilter: bridge: make ebt_snat ARP rewrite writable

Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass

tipc: re-fetch skb cb after tipc_msg_validate

ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation

ksmbd: prevent out-of-bounds stream writes by validating *pos

ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

ksmbd: add refcnt to ksmbd_conn struct

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

ksmbd: fix uaf in smb20_oplock_break_ack

Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

ksmbd: fix OOB write in QUERY_INFO for compound requests

crypto: tegra - Add missing CRYPTO_ALG_ASYNC

ksmbd: validate SID in parent security descriptor during ACL inheritance

ksmbd: validate inherited ACE SID length

ksmbd: validate owner of durable handle on reconnect

net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets

Fault Injection of RSA encryption in WolfCrypt

mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing

IBM Sterling B2B Integrator Standard Edition improper access control

IBM Security Guardium Key Lifecycle Manager file upload

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

ksmbd: fix use-after-free in ksmbd_session_rpc_open

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

IBM Cloud Pak for Multicloud Management Monitoring privilege escalation

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Parameter Injection Vulnerability in API Graph Execution Engine

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)