Open Source Vulnerabilities

keycloak-26.7

opensc

OpenSC before 0

opensc

sc_context_create in ctx

opensc

TCOS smart card software driver in OpenSC before 0

opensc

gemsafe GPK smart card software driver in OpenSC before 0

qt6-qtwebengine

Inappropriate implementation in Fullscreen in Google Chrome prior to 118

opensc

Oberthur smart card software driver in OpenSC before 0

qt6-qtwebengine

Inappropriate implementation in Input in Google Chrome prior to 118

opensc

out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption

qt6-qtwebengine

Inappropriate implementation in Navigation in Google Chrome prior to 118

opensc

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards

qt6-qtwebengine

Use after free in Blink History in Google Chrome prior to 118

opensc

flaw was found in OpenSC packages that allow a potential PIN bypass

qt6-qtwebengine

Inappropriate implementation in DevTools in Google Chrome prior to 118

opensc

use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards

qt6-qtwebengine

Heap buffer overflow in PDF in Google Chrome prior to 118

thunderbird

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept ...

opensc

vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

qt5-qtwebengine, qt6-qtwebengine

Use after free in Site Isolation in Google Chrome prior to 118

thunderbird

After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash

qt5-qtwebengine, qt6-qtwebengine

Integer overflow in USB in Google Chrome prior to 119

qt5-qtwebengine, qt6-qtwebengine

Insufficient data validation in USB in Google Chrome prior to 119

mongo-c-driver

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i

qt5-qtwebengine, qt6-qtwebengine

Use after free in WebAudio in Google Chrome prior to 119

axel

issue was discovered in ssl

thunderbird

parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process

qt5-qtwebengine, qt6-qtwebengine

Use after free in Navigation in Google Chrome prior to 119

qt5-qtwebengine, qt6-qtwebengine

Use after free in Garbage Collection in Google Chrome prior to 119

obexd-enhanced

Improper access control in subsystem for BlueZ before version 5

tiff, pcre

In PCRE 8

qt5-qtwebengine, qt6-qtwebengine

Use after free in Mojo in Google Chrome prior to 119

pcre

In PCRE 8

thunderbird

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status

qt6-qtwebengine

Use after free in WebAudio in Google Chrome prior to 119

pcre

libpcre1 in PCRE 8

qt5-qtwebengine, qt6-qtwebengine

Integer overflow in Skia in Google Chrome prior to 119

gd

Libgd version 2

pcre

libpcre in PCRE before 8

u-boot

boot loader in Das U-Boot before 2021

qt5-qtwebengine, qt6-qtwebengine

Use after free in Media Capture in Google Chrome prior to 120

gd

GD Graphics Library (aka LibGD) 2

openstack-keystone-2026.1-fips

openstack-keystone-2026.1-fips

u-boot

boot loader in Das U-Boot before 2021

openstack-keystone-2026.1-fips

openstack-keystone-2026.1-fips

lambda-nodejs22

lambda-nodejs22

qt6-qtwebengine

Use after free in FedCM in Google Chrome prior to 120

gd

gdImageColorMatch in gd_color_match