CVE-2026-18651

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

gawk: gawk: Memory corruption via integer overflow

A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk's internal memory, potentially leading to system instability...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...

firefox: thunderbird: Privilege escalation in the DOM: Content Processes component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...

firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

firefox: thunderbird: Information disclosure in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...