Monthly
Stomper at commit 5e2741e crashes its server process when a broker attempts to write data to a TCP socket already closed by the client peer, delivering a SIGPIPE signal that the process does not handle, causing immediate termination. Any unauthenticated remote client can reliably trigger this by closing the socket at the right moment during a broker-to-client transmission, making the denial-of-service condition automatable. No patch version has been confirmed; a publicly available proof-of-concept bug report exists, though EPSS places exploitation probability at only 0.15%.
Safari on iOS, iPadOS, and macOS Tahoe crashes when processing specially crafted web content due to improper state management (CWE-703), resulting in a denial-of-service condition. Affected are iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; impact is limited entirely to availability.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper state management (CWE-703). Affected platforms include all iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe versions prior to 26.6.2. Impact is limited to a denial-of-service condition - browser crash only, with no confidentiality or integrity consequences - and no public exploit or active exploitation has been identified at time of analysis.
Safari on Apple iOS, iPadOS, and macOS crashes when processing maliciously crafted web content due to a state management deficiency, constituting a network-delivered denial-of-service condition with no data exposure. Affected platforms span iOS and iPadOS below 18.7.10 (legacy branch) and 26.6.1 (iOS 26 branch), and macOS Tahoe below 26.6.2, all now patched by Apple. No public exploit code or active exploitation has been identified; EPSS sits at 0.14% (4th percentile), confirming very low real-world exploitation probability.
Improper exception handling in devpush's storage reset worker exposes a limited integrity-impact flaw for adjacent network attackers with low-privilege access. The `reset_storage` function in `app/workers/tasks/storage.py` fails to correctly check or handle exceptional conditions (CWE-703), meaning that under specific error scenarios, the storage reset process may enter an inconsistent or exploitable state. With a CVSS 4.0 score of 2.1, no public exploit code identified, and no active exploitation confirmed, this represents a low-priority finding that nonetheless warrants a vendor patch given the unresponsive upstream maintainer.
Denial of service in Cisco RoomOS software allows remote unauthenticated attackers to exhaust availability of affected collaboration endpoints and room-based video devices through improper handling of exceptional conditions (CWE-703). The issue was internally discovered by Cisco's RoomOS engineering team as part of a hardening release bundling multiple flaws under this identifier, carries a CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), and has no public exploit identified at time of analysis. Note that the CVSS vector reflects availability-only impact even though a source tag labels it 'Information Disclosure,' a discrepancy defenders should verify against the Cisco advisory.
Denial of service in Capgo's /auth/v1/otp endpoint blocks email-based 2FA enrollment for authenticated users in all versions before 12.128.2. The backend captcha validation subsystem fails to handle exceptions gracefully, consistently returning HTTP 500 errors and preventing users from completing two-factor authentication setup. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the impact is security-control degradation: users cannot activate 2FA, leaving accounts with only single-factor protection.
Memory safety flaw in the CanvasWebGL graphics component of Mozilla Firefox allows remote attackers to trigger incorrect boundary handling through crafted web content, leading to limited confidentiality, integrity, and availability impact. The issue affects Firefox prior to version 152 and Firefox ESR prior to 140.12, and no public exploit identified at time of analysis. Reported by Mozilla with low complexity and no authentication required (CVSS 7.3).
Memory leak in Netty's HAProxy codec (io.netty:netty-codec-haproxy) allows remote unauthenticated attackers to exhaust server memory by sending PROXY protocol v2 frames containing a malformed PP2_TYPE_SSL TLV with a length below 5 bytes. The flaw causes a retained slice on the pooled cumulation buffer to never be released when an IndexOutOfBoundsException escapes the decoder's narrow exception handler. No public exploit identified at time of analysis, but the issue is trivially reproducible from the advisory's technical detail and affects any service that accepts PROXY v2 input from untrusted peers.
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from multiple improper exceptional-condition handling paths exposed during JavaScript execution: a null pointer dereference when resolving error values in nested eval/throw/finally scenarios, an integer underflow in TypedArray.copyWithin() triggered by resizable ArrayBuffer coercion, and an unguarded assertion failure when array objects transition unexpectedly from fast to slow mode. Attack vector is local and requires user interaction (UI:R), with impact confined entirely to availability - crashing the host process. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Stomper at commit 5e2741e crashes its server process when a broker attempts to write data to a TCP socket already closed by the client peer, delivering a SIGPIPE signal that the process does not handle, causing immediate termination. Any unauthenticated remote client can reliably trigger this by closing the socket at the right moment during a broker-to-client transmission, making the denial-of-service condition automatable. No patch version has been confirmed; a publicly available proof-of-concept bug report exists, though EPSS places exploitation probability at only 0.15%.
Safari on iOS, iPadOS, and macOS Tahoe crashes when processing specially crafted web content due to improper state management (CWE-703), resulting in a denial-of-service condition. Affected are iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; impact is limited entirely to availability.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper state management (CWE-703). Affected platforms include all iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe versions prior to 26.6.2. Impact is limited to a denial-of-service condition - browser crash only, with no confidentiality or integrity consequences - and no public exploit or active exploitation has been identified at time of analysis.
Safari on Apple iOS, iPadOS, and macOS crashes when processing maliciously crafted web content due to a state management deficiency, constituting a network-delivered denial-of-service condition with no data exposure. Affected platforms span iOS and iPadOS below 18.7.10 (legacy branch) and 26.6.1 (iOS 26 branch), and macOS Tahoe below 26.6.2, all now patched by Apple. No public exploit code or active exploitation has been identified; EPSS sits at 0.14% (4th percentile), confirming very low real-world exploitation probability.
Improper exception handling in devpush's storage reset worker exposes a limited integrity-impact flaw for adjacent network attackers with low-privilege access. The `reset_storage` function in `app/workers/tasks/storage.py` fails to correctly check or handle exceptional conditions (CWE-703), meaning that under specific error scenarios, the storage reset process may enter an inconsistent or exploitable state. With a CVSS 4.0 score of 2.1, no public exploit code identified, and no active exploitation confirmed, this represents a low-priority finding that nonetheless warrants a vendor patch given the unresponsive upstream maintainer.
Denial of service in Cisco RoomOS software allows remote unauthenticated attackers to exhaust availability of affected collaboration endpoints and room-based video devices through improper handling of exceptional conditions (CWE-703). The issue was internally discovered by Cisco's RoomOS engineering team as part of a hardening release bundling multiple flaws under this identifier, carries a CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), and has no public exploit identified at time of analysis. Note that the CVSS vector reflects availability-only impact even though a source tag labels it 'Information Disclosure,' a discrepancy defenders should verify against the Cisco advisory.
Denial of service in Capgo's /auth/v1/otp endpoint blocks email-based 2FA enrollment for authenticated users in all versions before 12.128.2. The backend captcha validation subsystem fails to handle exceptions gracefully, consistently returning HTTP 500 errors and preventing users from completing two-factor authentication setup. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the impact is security-control degradation: users cannot activate 2FA, leaving accounts with only single-factor protection.
Memory safety flaw in the CanvasWebGL graphics component of Mozilla Firefox allows remote attackers to trigger incorrect boundary handling through crafted web content, leading to limited confidentiality, integrity, and availability impact. The issue affects Firefox prior to version 152 and Firefox ESR prior to 140.12, and no public exploit identified at time of analysis. Reported by Mozilla with low complexity and no authentication required (CVSS 7.3).
Memory leak in Netty's HAProxy codec (io.netty:netty-codec-haproxy) allows remote unauthenticated attackers to exhaust server memory by sending PROXY protocol v2 frames containing a malformed PP2_TYPE_SSL TLV with a length below 5 bytes. The flaw causes a retained slice on the pooled cumulation buffer to never be released when an IndexOutOfBoundsException escapes the decoder's narrow exception handler. No public exploit identified at time of analysis, but the issue is trivially reproducible from the advisory's technical detail and affects any service that accepts PROXY v2 input from untrusted peers.
Denial of service in Samsung Escargot JavaScript engine at commit 590345cc6258317c5da850d846ce6baaf2afc2d3 stems from multiple improper exceptional-condition handling paths exposed during JavaScript execution: a null pointer dereference when resolving error values in nested eval/throw/finally scenarios, an integer underflow in TypedArray.copyWithin() triggered by resizable ArrayBuffer coercion, and an unguarded assertion failure when array objects transition unexpectedly from fast to slow mode. Attack vector is local and requires user interaction (UI:R), with impact confined entirely to availability - crashing the host process. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.