Threats affecting pkg:generic/net-snmp

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A memory corruption vulnerability in the Quota component of Google Chrome versions prior to 156.0.8078.79 could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Skia component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability in the GarbageCollection component of Google Chrome prior to version 156.0.8078.79 could allow a remote attacker to execute arbitrary code outside the sandbox by crafting a malicious HTML page. The issue is classified with high severity by Chromium security.

An out-of-bounds read vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to read memory inside the sandbox by delivering a specially crafted HTML page. The Chromium project has assigned this issue a medium security severity rating.

A memory corruption vulnerability exists in the MediaStream component of Google Chrome versions prior to 156.0.8078.79. This flaw could allow a remote attacker to potentially read memory inside the sandbox by delivering a crafted HTML page. The vulnerability is classified as critical by Chromium security.

An input validation flaw in CacheStorage of Google Chrome versions prior to 156.0.8078.79 allows remote attackers to potentially execute arbitrary code within the browser sandbox via a crafted HTML page. The issue is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the DOM component of Google Chrome versions prior to 156.0.8078.79. This flaw could allow a remote attacker to execute arbitrary code inside the browser's sandbox by crafting a malicious HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

A vulnerability in the V8 JavaScript engine used by Google Chrome prior to version 156.0.8078.79 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The issue is due to improper input validation.

A use-after-free vulnerability exists in the Blink component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Quota component of Google Chrome versions prior to 156.0.8078.79. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the Dawn component of Google Chrome versions prior to 156.0.8078.79. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the Autofill component of Google Chrome versions prior to 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

An integer overflow vulnerability in the editing component of Google Chrome versions prior to 156.0.8078.79 could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The issue is classified with high security severity by Chromium.

A vulnerability in Xcode related to improper handling of symbolic links could allow an app to read arbitrary files. This issue is fixed in Xcode version 27.2 by improving symlink handling.

A heap-based buffer overflow vulnerability exists in Ghostscript when processing specially crafted TrueType fonts or documents embedding them. This flaw arises from an accounting error during font rendering that bypasses buffer size checks. Exploitation requires local access with high privileges and user interaction, potentially leading to denial of service or arbitrary code execution.

An authorization issue in Xcode was addressed by improving state management. The vulnerability could allow an app to access sensitive user data. This issue is fixed in Xcode version 27.2.

An improper input validation vulnerability exists in the Skia component of Google Chrome versions prior to 156.0.8078.79. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A vulnerability in Keycloak's required action provider mechanism allows bypassing mandatory user actions such as profile verification or terms acceptance. When an authorization request includes the kc_action query parameter set to an already assigned mandatory action, Keycloak may incorrectly skip these challenges and issue an authorization code. This flaw requires valid user credentials and affects only specific mandatory actions.