Threat database

Multiple vulnerabilities in the Linux kernel allow for denial of service conditions. The Linux kernel is the core component of the Linux operating system. No specific affected versions or detailed technical information are provided.

Multiple critical security vulnerabilities have been identified in the Skia graphics library component used by Google Chrome and Microsoft Edge browsers. These vulnerabilities include heap buffer overflows, integer overflows, use-after-free conditions, out-of-bounds reads and writes, insufficient validation of untrusted input, and other memory safety issues. The issues affect the Skia implementation within the chromium-browser package and WebKitGTK port on GTK platforms. Red Hat has released security updates addressing these vulnerabilities in the webkit2gtk3 package for Red Hat Enterprise Linux 9. The vulnerabilities collectively pose a critical security risk, potentially allowing remote attackers to exploit compromised renderer processes via crafted web content.

Multiple vulnerabilities have been identified in Apache HTTP Server versions prior to 2.4.68, specifically affecting the mod_http2 module which implements the HTTP/2 protocol. These include a remote denial of service vulnerability via compression bomb and Slowloris-style attack (CVE-2026-49975). A security update addressing these issues is available in version 2.4.68.

This security update for Erlang addresses multiple vulnerabilities including path traversal issues in pathname handling and SFTP chroot, as well as several certificate validation flaws in the public_key application that could allow certificate and OCSP response forgery. These issues could enable unauthorized access or man-in-the-middle attacks if exploited.

A vulnerability in russh allows an attacker to send a compressed SSH packet that decompresses to an excessively large size, causing the server or client to consume large amounts of memory. This occurs because the decompression output was not limited, enabling a small compressed packet to expand to hundreds of megabytes. The issue affects russh versions from 0.34.0 up to but not including 0.61.1. The flaw is fixed in version 0.61.1 by capping decompressed output size to 256 KiB plus header bytes, rejecting larger packets.

Multiple critical security vulnerabilities have been identified in the Skia graphics library component used by Google Chrome and Microsoft Edge browsers. These vulnerabilities include heap buffer overflows, integer overflows, use-after-free, out-of-bounds memory access, insufficient input validation, and information leakage. The issues affect the WebKitGTK port on the GTK platform as well. Red Hat has issued a critical security advisory with updates for webkit2gtk3 to address these flaws.

Multiple vulnerabilities have been identified in Grafana, an analysis and visualization software. These issues affect versions prior to 11.6.14+security-04 and the specific version 11.6.14+security-04. The vulnerabilities have been addressed in the fixed version 11.6.14+security-04. Red Hat advisories related to the Multicluster Global Hub, which includes Grafana components, indicate important security updates but do not specify individual fixes for these Grafana vulnerabilities. No known exploits in the wild have been reported.

Multiple critical security vulnerabilities have been identified in the Skia graphics library component used by Chromium-based browsers such as Google Chrome and Microsoft Edge. These vulnerabilities include heap buffer overflows, integer overflows, use-after-free conditions, out-of-bounds reads and writes, insufficient validation of untrusted input, and information leakage. The issues affect the WebKitGTK port and the chromium-browser package, impacting rendering processes. A security advisory from Red Hat addresses these vulnerabilities with updates to the webkit2gtk3 package for Red Hat Enterprise Linux 9.

Multiple vulnerabilities have been identified in Apache Tomcat versions prior to 14.60 and version 14.6. These issues affect various components of the Tomcat server and have been addressed in updated Red Hat Hardened Images RPM packages for Tomcat 10 and 11. The vulnerabilities are tracked under CVE-2026-41284 and related CVEs, with fixes available in version 14.60 and later.

This entry reports multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided.

Axios versions from 1.0.0 up to but not including 1.15.2 contain a prototype pollution vulnerability in the HTTP adapter. This flaw allows polluted properties on Object.prototype to be used by Axios in outbound HTTP requests, potentially leading to information disclosure and manipulation of network communications. The vulnerability requires another component in the same environment to have already polluted Object.prototype. The issue is fixed in version 1.15.2.

A critical improper input validation vulnerability (CVE-2026-43944) affects electerm versions from 3.0.6 up to but not including 3.8.15. This flaw allows arbitrary local code execution when a user clicks a crafted electerm:// deep link or opens a malicious shortcut or command that launches electerm with attacker-controlled options. The vulnerability has been fixed in version 3.8.15.

This entry reports multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided. There is no information on exploitation in the wild or available patches.

CVE-2026-44118 is an authentication bypass vulnerability in OpenClaw versions before 2026.4.22. The issue arises because OpenClaw derives loopback MCP owner context from spoofable bearer tokens in request headers. This allows non-owner loopback clients to impersonate the owner by manipulating sender-owner header metadata, thereby bypassing owner-restricted operations.

OpenClaw versions before 2026.4.20 have a server-side request forgery (SSRF) vulnerability in the QQBot direct media upload feature. This flaw allows attackers to bypass SSRF protections by sending crafted image URLs to the uploadC2CMedia and uploadGroupMedia endpoints, causing the server to relay unintended requests.

OpenClaw versions before 2026.4.22 have a server-side request forgery (SSRF) vulnerability in the Zalo plugin's sendPhoto function. The vulnerability arises because the function does not properly validate outbound photo URLs against the SSRF guard. This allows attackers to bypass SSRF protections by submitting malicious photo URLs to the Zalo Bot API, potentially enabling unauthorized access to internal network resources.

OpenClaw versions before 2026.4.22 have a vulnerability (CVE-2026-44115) related to incomplete input validation in an exec allowlist. This flaw allows attackers to bypass allowlist checks by embedding shell expansion tokens within unquoted heredoc bodies, enabling execution of unauthorized commands at runtime. The vulnerability is rated high severity with a CVSS 4.0 score of 8.7.

OpenClaw versions before 2026.4.20 have a vulnerability where the runtime-control environment namespace OPENCLAW_ is not properly reserved in workspace dotenv files. This allows attackers to override critical runtime variables such as OPENCLAW_GIT_DIR, potentially manipulating trusted runtime behavior during source-update or installer processes.

CVE-2026-44113 is a time-of-check/time-of-use (TOCTOU) race condition vulnerability in OpenClaw versions before 2026.4.22. It affects the OpenShell filesystem bridge, allowing attackers to exploit symlink swaps during filesystem operations to read files outside the intended mount root. This bypasses sandbox restrictions and grants unauthorized file access.