Month: February 2026

Information published. Continue reading CVE-2024-6611 A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.→

Information published. Continue reading CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion→

Information published. Continue reading CVE-2025-5372 Libssh: incorrect return code handling in ssh_kdf() in libssh→

Information published. Continue reading CVE-2025-37776 ksmbd: fix use-after-free in smb_break_all_levII_oplock()→

Information published. Continue reading CVE-2024-28835 Gnutls: potential crash during chain building/verification→

Information published. Continue reading CVE-2024-54680 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.→

Information published. Continue reading CVE-2025-32051 Libsoup: segmentation fault when parsing malformed data uri→

Information published. Continue reading CVE-2024-25177 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).→