https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 03:19:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02724 bdu:2026-02724 https://cve.radiocsirt.org/vuln/bdu:2026-02724 https://cve.radiocsirt.org/vuln/euvd-2026-276210 EUVD-2026-276210 https://cve.radiocsirt.org/vuln/euvd-2026-276210 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29079 <p>Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting the qualified_name field. That corrupted value is later used as a pointer and dereferenced near the zero page. This vulnerability is fixed in 2.7.0.</p> <p>Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting the qualified_name field. That corrupted value is later used as a pointer and dereferenced near the zero page. This vulnerability is fixed in 2.7.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-29079 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-29079 <p><strong>Affected:</strong> Ubuntu:26.04:LTS: lexbor</p> <p>Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting the qualified_name field. That corrupted value is later used as a pointer and dereferenced near the zero page. This vulnerability is fixed in 2.7.0.</p> <p><strong>Affected:</strong> Ubuntu:26.04:LTS: lexbor</p> <p>Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting the qualified_name field. That corrupted value is later used as a pointer and dereferenced near the zero page. This vulnerability is fixed in 2.7.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-29079