https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:10:04.835012+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4952 ALSA-2020:4952 — Important: freetype security update 2026-10-06T00:10:05.561384+00:00

Affected: AlmaLinux:8: freetype, AlmaLinux:8: freetype-devel

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.

Security Fix(es):

* freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-05385 bdu:2020-05385 2026-10-06T00:10:05.561532+00:00 bdu:2020-05385 https://cve.radiocsirt.org/vuln/bell-cve-2020-15999 Withdrawn: BELL-CVE-2020-15999 — CVE-2020-15999 does not affect BellSoft software 2026-10-06T00:10:05.561563+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2020-avi-659 certfr-2020-avi-659 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-06T00:10:05.561589+00:00 certfr-2020-avi-659 https://cve.radiocsirt.org/vuln/euvd-2026-256055 EUVD-2026-256055 2026-10-06T00:10:05.561614+00:00 EUVD-2026-256055 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15999 fkie_cve-2020-15999 2026-10-06T00:10:05.561632+00:00

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/ghsa-pv36-h7jh-qm62 GHSA-pv36-h7jh-qm62 — Heap buffer overflow in CefSharp 2026-10-06T00:10:05.561669+00:00

Affected: NuGet: CefSharp.Common, NuGet: CefSharp.Wpf, NuGet: CefSharp.WinForms, NuGet: CefSharp.Wpf.HwndHost

### Impact A memory corruption bug(Heap overflow) in the FreeType font rendering library.

> This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images .

As per https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/

Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild.

### Patches Upgrade to 85.3.130 or higher

### References - https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ - https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 - https://magpcss.org/ceforum/viewtopic.php?f=10&t=17942

To review the `CEF/Chromium` patch see https://bitbucket.org/chromiumembedded/cef/commits/cd6cbe008b127990036945fb75e7c2c1594ab10d

 https://cve.radiocsirt.org/vuln/gsd-2020-15999 gsd-2020-15999 2026-10-06T00:10:05.561749+00:00 gsd-2020-15999 https://cve.radiocsirt.org/vuln/icsa-23-264-05 ICSA-23-264-05 — Rockwell Automation Connected Components Workbench 2026-10-06T00:10:05.561772+00:00

Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Google Chrome versions before 86.0.4240.198. If exploited, a remote threat actor could potentially perform a sandbox escape via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Animation within Google Chrome before 98.0.4758.102. This vulnerability could potentially allow a remote threat actor to exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.18. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.198. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a heap buffer overflow vulnerability in Freetype within Google Chrome before 86.0.4240.111. This vulnerability could allow a remote threat actor to potentially exploit heap corruption via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/msrc_cve-2020-15999 msrc_CVE-2020-15999 — Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially explo… 2026-10-06T00:10:05.561824+00:00 msrc_CVE-2020-15999 https://cve.radiocsirt.org/vuln/oesa-2021-1103 OESA-2021-1103 — firefox security update 2026-10-06T00:10:05.561854+00:00

Affected: openEuler:20.03-LTS: firefox, openEuler:20.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.(CVE-2020-15969) Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.(CVE-2020-15999)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1718-1 openSUSE-SU-2020:1718-1 — Security update for chromium 2026-10-06T00:10:05.561895+00:00

Security update for chromium

 https://cve.radiocsirt.org/vuln/rhsa-2020:4351 RHSA-2020:4351 — Red Hat Security Advisory: chromium-browser security update 2026-10-06T00:10:05.561924+00:00

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png chromium-browser: Inappropriate implementation in Blink chromium-browser: Use after free in media chromium-browser: Use after free in PDFium chromium-browser: Use after free in printing

 https://cve.radiocsirt.org/vuln/suse-su-2020:14548-1 SUSE-SU-2020:14548-1 — Security update for MozillaFirefox 2026-10-06T00:10:05.561958+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15999 UBUNTU-CVE-2020-15999 2026-10-06T00:10:05.561997+00:00

Affected: Ubuntu:Pro:14.04:LTS: freetype, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: freetype, Ubuntu:16.04:LTS: android, Ubuntu:18.04:LTS: chromium-browser, Ubuntu:18.04:LTS: freetype, Ubuntu:20.04:LTS: freetype

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1994 WID-SEC-W-2022-1994 — Google Android Patchday Januar 2026-10-06T00:10:05.562159+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.