Vulnerabilities & Exploits
Debian Issues Netty Fixes for DoS and Injection Flaws Debian released updates for the Netty Java NIO framework to fix multiple security flaws. Vulnerabilities include an HTTP/2 MadeYouReset DDoS logic issue, request smuggling, SMTP command injection and unbounded HttpPostRequestDecoder resource exhaustion.
1 source · Mar 19
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 19 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 18 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Mar 18 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Part of the PlainSec briefing for 2026-03-11
Every edition of this story: Debian Issues Netty Fixes for DoS and Injection Flaws
More from today Vulnerabilities & Exploits
Debian Issues Netty Fixes for DoS and Injection Flaws Debian released updates for the Netty Java NIO framework to fix multiple security flaws. Vulnerabilities include an HTTP/2 MadeYouReset DDoS logic issue, request smuggling, SMTP command injection and unbounded HttpPostRequestDecoder resource exhaustion.
1 source · Mar 19
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 19 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 18 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Mar 18 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Part of the PlainSec briefing for 2026-03-11
Every edition of this story: Debian Issues Netty Fixes for DoS and Injection Flaws
More from today