Search CVE reports


Toggle filters

1271 – 1280 of 47438 results

Status is adjusted based on your filters.


CVE-2026-43658

Medium priority
Ignored

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously...

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28984

Medium priority
Ignored

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously...

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28958

Medium priority
Ignored

This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28955

Medium priority
Ignored

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously...

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28953

Medium priority
Ignored

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously...

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28947

Medium priority
Ignored

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS...

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-28946

Medium priority
Ignored

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 20.04 LTS
webkitgtk
webkit2gtk Ignored
qtwebkit-source
qtwebkit-opensource-src Ignored
wpewebkit Ignored
Show less packages

CVE-2026-77648

Medium priority
Needs evaluation

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http://...

1 affected package

glance

Package 20.04 LTS
glance Needs evaluation
Show less packages

CVE-2026-77647

Medium priority
Needs evaluation

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain...

1 affected package

spip

Package 20.04 LTS
spip Needs evaluation
Show less packages

CVE-2026-77643

Medium priority
Needs evaluation

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because...

1 affected package

xapian-core

Package 20.04 LTS
xapian-core Needs evaluation
Show less packages