CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The MSM QDSP6 audio driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service (buffer over-read) or potentially unspecified other impact via a crafted application making an ioctl call specifying many commands.
A stack-based buffer overflow exists in the supply_lm_input_write function in the MSM Thermal driver for Linux kernel 3.x. Attackers can exploit this vulnerability by sending a large amount of data through the debugfs interface, potentially leading to denial of service or unspecified other impacts.
In Android 5.x, a vulnerability allows attackers to bypass the DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action.
The TSC driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service through an invalid pointer dereference. This can be achieved via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call.
Use-after-free vulnerability in the msm_set_crop function in the MSM-Camera driver for Linux kernel 3.x allows attackers to gain privileges or cause a denial of service via a crafted ioctl call.
The vfe31_proc_general function in the MSM-VFE31 driver for Linux kernel 3.x does not validate a certain id value, allowing attackers to gain privileges or cause a denial of service (memory corruption) via an application making a crafted ioctl call.
Multiple unspecified vulnerabilities in Google Chrome before version 52.0.2743.116 may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Blink in Google Chrome before version 52.0.2743.116 does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image. This allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before version 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter. This allows remote attackers to bypass intended access restrictions via a crafted URL.
The Developer Tools (DevTools) subsystem in Blink, used in Google Chrome before version 52.0.2743.116, mishandles the script-path hostname, remoteBase, and remoteFrontendUrl parameters. This allows remote attackers to bypass intended access restrictions via a crafted URL.
The Web Cryptography API (WebCrypto) implementation in Blink, used in Google Chrome before version 52.0.2743.116, does not properly copy data buffers. This may allow remote attackers to cause a denial of service (use-after-free) or potentially have unspecified other impact via crafted JavaScript code.
Blink, as used in Google Chrome before version 52.0.2743.116, allows remote attackers to spoof the URL in the address bar via vectors involving a provisional URL for an initially empty document.
A heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.
Multiple integer overflows in OpenJPEG, used in PDFium in Google Chrome before version 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before version 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.
CVE-2016-6635 is a CSRF vulnerability in the wp_ajax_wp_compression_test function in WordPress before version 4.5, allowing remote attackers to hijack administrators' authentication for changing the script compression option.
The SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, allowing remote attackers to cause a denial of service (infinite loop) via a crafted packet.
WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address.
The gdImageCropThreshold function in the GD Graphics Library (libgd) before version 2.2.3, as used in PHP before version 7.0.9, allows remote attackers to cause an application crash via an invalid color index.
The zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, allowing remote attackers to execute arbitrary code or cause a denial of service via crafted serialized data containing a ZipArchive object.