Open Source Vulnerabilities
qt5-qtwebengine
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91
qt5-qtwebengine
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91
py3-gitpython
GitPython is a python library used to interact with Git repositories
py3-gitpython
GitPython is a python library used to interact with Git repositories
qt5-qtwebengine
Out of bounds read in V8 in Google Chrome prior to 91
qt5-qtwebengine
Out of bounds read in V8 in Google Chrome prior to 91
xpdf
There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream
xpdf
There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream
py3-ujson
UltraJSON (aka ujson) through 5
qt5-qtwebengine
Use after free in V8 in Google Chrome prior to 91
qt5-qtwebengine
Use after free in V8 in Google Chrome prior to 91
py3-ujson
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3
py3-ujson
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3
qt5-qtwebengine, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
Out of bounds write in ANGLE in Google Chrome prior to 91
qt5-qtwebengine/ thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
Out of bounds write in ANGLE in Google Chrome prior to 91
py3-ujson
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3
py3-ujson
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3
qt5-qtwebengine
Use after free in Loader in Google Chrome prior to 91
qt5-qtwebengine
Use after free in Loader in Google Chrome prior to 91
xen, xen, xen
PVH guests have their ACPI tables constructed by the toolstack
xen/ xen/ xen
PVH guests have their ACPI tables constructed by the toolstack
xpdf
There is an invalid memory access in the TextLine class in TextOutputDev
xpdf
There is an invalid memory access in the TextLine class in TextOutputDev
qt5-qtwebengine
Use after free in Network service in Google Chrome prior to 91
qt5-qtwebengine
Use after free in Network service in Google Chrome prior to 91
xen, xen, xen
hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" mode
xen/ xen/ xen
hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" mode
qt5-qtwebengine
Use after free in WebAudio in Google Chrome prior to 91
qt5-qtwebengine
Use after free in WebAudio in Google Chrome prior to 91
xen, xen, xen
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register
xen/ xen/ xen
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register
qt5-qtwebengine
Out of bounds write in ANGLE in Google Chrome prior to 91
qt5-qtwebengine
Out of bounds write in ANGLE in Google Chrome prior to 91
xen, xen, xen
Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi
xen/ xen/ xen
Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi
qt5-qtwebengine
Type Confusion in V8 in Google Chrome prior to 91
qt5-qtwebengine
Type Confusion in V8 in Google Chrome prior to 91
xen, xen, xen
optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors
xen/ xen/ xen
optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors
qt5-qtwebengine
Heap buffer overflow in WebGL in Google Chrome prior to 92
qt5-qtwebengine
Heap buffer overflow in WebGL in Google Chrome prior to 92
xen, xen, xen
cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems
xen/ xen/ xen
cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems
qt5-qtwebengine
Use after free in sqlite in Google Chrome prior to 92
qt5-qtwebengine
Use after free in sqlite in Google Chrome prior to 92
xen, xen, xen
Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used
xen/ xen/ xen
Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used
qt5-qtwebengine
Use after free in GPU in Google Chrome prior to 92
qt5-qtwebengine
Use after free in GPU in Google Chrome prior to 92
xen, xen, xen
Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes
xen/ xen/ xen
Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes
qt5-qtwebengine
Inappropriate implementation in Compositing in Google Chrome prior to 92
qt5-qtwebengine
Inappropriate implementation in Compositing in Google Chrome prior to 92
xen, xen, xen
Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed
xen/ xen/ xen
Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed
