Apple Multiple Products Buffer Overflow Vulnerability

crypto: algif_aead - Revert to operating out-of-place

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

Gvfs: sftp: heap-based buffer overflow in read_reply()

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

net: skbuff: propagate shared-frag marker through frag-transfer helpers

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

xfrm: esp: avoid in-place decrypt on shared skb frags

redis-server RESTORE invalid memory access may allow remote code execution

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

Privilege escalation in the Graphics: WebRender component

Code execution vulnerability in SWIG code generation in cmd/go

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

FreeRDP has Out-of-bounds Write

FreeRDP has Out-of-bounds Write

Use-after-free in the Storage: IndexedDB component

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Heap buffer overflow in libvpx

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Sandbox escape due to incorrect boundary conditions in the Telemetry component

Potential code smuggling via doc comments in cmd/cgo

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Vim modeline bypass via various options affects Vim < 9.2.0276

Corosync: corosync: denial of service and information disclosure via crafted udp packet

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension…

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)