Divide By Zero in vim/vim

Go-Getter Vulnerable to Decompression Bombs

Chromium: CVE-2023-0474 Use after free in GuestView

Chromium: CVE-2023-0473: Type Confusion in ServiceWorker

Chromium: CVE-2023-0472 Use after free in WebRTC

Chromium: CVE-2023-0471 Use after free in WebTransport

A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.

A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.

Invalid certificate policies in leaf certificates are silently ignored

OpenSSL: CVE-2023-0464 Excessive Resource Usage Verifying X.509 Policy Constraints

Copy_from_user Spectre-V1 Gadget in Linux Kernel

Heap-based Buffer Overflow in vim/vim

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.

A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message the attacker would be able to decrypt the application data exchanged over that connection.

Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow

Heap-based Buffer Overflow in vim/vim