Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

VP9 in libvpx before 1.13.1 mishandles widths leading to a crash related to encoding.

MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.

Out-of-bounds write in exiv2

Adobe: CVE-2023-44323 Adobe PDF Remote Code Execution Vulnerability

Chromium: CVE-2023-4431: Out of bounds memory access in Fonts

Chromium: CVE-2023-4430: Use after free in Vulkan

Chromium: CVE-2023-4429: Use after free in Loader

Chromium: CVE-2023-4428: Out of bounds memory access in CSS

Chromium: CVE-2023-4427: Out of bounds memory access in V8

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.

Parsing large DNS messages may cause excessive CPU load

Memory leak in btrfs_get_dev_args_from_path()

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

Kernel: btrfs: double free in btrfs_get_root_ref()