Month: February 2026
CVE-2025-38217 hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
Information published. Continue reading CVE-2025-38217 hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
CVE-2023-51257 An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
CVE-2025-21862 drop_monitor: fix incorrect initialization order
Information published. Continue reading CVE-2025-21862 drop_monitor: fix incorrect initialization order
CVE-2023-52576 x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
CVE-2024-35195 Requests `Session` object does not verify requests after making first request with verify=False
CVE-2024-43799 send vulnerable to template injection that can lead to XSS
Information published. Continue reading CVE-2024-43799 send vulnerable to template injection that can lead to XSS
CVE-2025-37817 mcb: fix a double free bug in chameleon_parse_gdd()
Information published. Continue reading CVE-2025-37817 mcb: fix a double free bug in chameleon_parse_gdd()