undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Heap Use-After-Free in the PKCS7_verify() Function

FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS

FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion

FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass

wifi: mac80211: use safe list iteration in radar detect work

wifi: mac80211: drop stray 'static' from fast-RX rx_result

wifi: mac80211: remove station if connection prep fails

FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass

net: skbuff: propagate shared-frag marker through frag-transfer helpers

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

protobufjs: Code injection through bytes field defaults in generated toObject code

xfrm: esp: avoid in-place decrypt on shared skb frags

OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

redis-server RESTORE invalid memory access may allow remote code execution

redis-server use-after-free in unblock client flow may allow remote code execution

smb: client: validate the whole DACL before rewriting it in cifsacl

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

Privilege escalation in the Graphics: WebRender component

Code execution vulnerability in SWIG code generation in cmd/go

Incorrect boundary conditions, integer overflow in the Graphics: Text component

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

FreeRDP has Out-of-bounds Write

FreeRDP has Out-of-bounds Write

Use-after-free in the Storage: IndexedDB component

Heap buffer overflow in libvpx

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Use-after-free in the IPC component

Sandbox escape due to integer overflow in the Graphics component

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Dpdk: dpdk: heap out-of-bounds read/write in gso header copy

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component