CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Chrome Apps in Google Chrome prior to version 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, allowing a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
A use after free in PDFium in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to potentially exploit heap corruption via a crafted PDF file.
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
A use after free in PDFium in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
A use after free in PDFium in Google Chrome prior to version 57.0.2987.98 for Linux and Windows allows a remote attacker to perform an out of bounds memory read via a crafted PDF file.
PDFium in Google Chrome prior to version 57.0.2987.98 for Windows could be made to increment off the end of a buffer, allowing a remote attacker to potentially exploit heap corruption via a crafted PDF file.
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Błąd w obsłudze złożonych typów danych w silniku V8 w Google Chrome przed wersją 57.0.2987.98 dla systemów Linux, Windows i Mac oraz przed wersją 57.0.2987.108 dla Androida umożliwiał zdalnemu atakującemu wykonanie dowolnego kodu poprzez spreparowaną stronę HTML.
The xsltAddTextString function in libxslt 1.1.29 lacked a check for integer overflow during size calculation, allowing a remote attacker to perform an out of bounds memory write via a crafted HTML page.
There is a stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, affecting Shield TV before OTA 3.3, Shield Tablet before OTA 4.4, and Shield Tablet TK1 before OTA 1.5.
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite, affecting the Common Desktop Environment (CDE). It allows a low privileged attacker with logon to the infrastructure to compromise Solaris.
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite, concerning IPC frameworks. It allows an unauthenticated attacker with network access to remotely compromise the system, potentially leading to hangs or frequent crashes (complete DOS) of the device.
Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools, affecting versions prior to 5.7. It allows a low privileged attacker with access to the infrastructure where ASR runs to compromise this component.
Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools, affecting versions prior to 5.7. It allows a low privileged attacker with access to the infrastructure to compromise ASR, potentially leading to unauthorized access to critical data.
Vulnerability in the Data Store component of Oracle Berkeley DB, affecting versions prior to 6.2.32. It allows an unauthenticated attacker with access to the infrastructure where Data Store runs to compromise it, but requires interaction from a person other than the attacker.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS