Chris Coulson

There's a use-after-free vulnerability in grub_cmd_chainloader() function

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

Possible remote DOS in WebApps

GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.

Potential DoS through abuse of rate limit in libunity-webapps for Firefox