Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass

Shim: out-of-bounds read printing error messages

Full screen notification obscured by file open dialog

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e. neither alphanumeric nor underscore) aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

HAProxy through 2.0.32 2.1.x and 2.2.x through 2.2.30 2.3.x and 2.4.x through 2.4.23 2.5.x and 2.6.x before 2.6.15 2.7.x before 2.7.10 and 2.8.x before 2.8.2 forwards empty Content-Length headers violating RFC 9110 section 8.6. In uncommon cases an HTTP/1 server behind HAProxy may interpret the payload as an extra request.

Use-after-free in Linux kernel's netfilter: nf_tables component

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

Grub2: bypass the grub password protection feature

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

Electron: CVE-2023-39956 -Visual Studio Code Remote Code Execution Vulnerability

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.