CVE-2026-102721: Out-of-bounds Read

A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...

CVE-2026-102878: Origin Validation Error

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102673: Origin Validation Error

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe through Electron's OpenURLFromTab navigation path, including links using target="blank" or a middle-click, did not...

PT-2026-102656

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists in the handling of DTLS 1.2 associations using an AEAD Authenticated Encryption with Associated Data cipher suite. An attacker can terminate an established association by sending a...

ROS-20260929-73-0002

The vulnerability of the trytodeltimersync function in the kernel/time/timer.c module of the Linux timer subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-102764

Name of the Vulnerable Software and Affected Versions NetX RTSP Server affected versions not specified Description An unauthenticated client can cause a denial of service by draining the RTSP server's packet pool. This occurs when requests are sent containing a Session header that the parser cann...

Important: dotnet10.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Exposure of sensitive information to an...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...

CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

ROS-20260929-73-0013

The vulnerability of the drivers/mtd/nand/raw/cadence-nand-controller.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260929-73-0073

The vulnerability of the pagepoolallocnetmemsslow function in the net/core/pagepool.c module, which is part of the Linux kernel’s networking functions, is related to errors handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0023

The vulnerability of the drivers/comedy kernel components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: dotnet8.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet8.0 Issue Correction...

CVE-2026-101278: Origin Validation Error

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

ROS-20260929-73-0075

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c file of the Linux device driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0088

The vulnerability of the dorawreadunlock function in the kernel/locking/spinlockdebug.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-102415

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A weakness exists in the PSL Wildcard Handler component within the opendmarc get tld function of the libopendmarc/opendmarc tld.c file. A remote attacker can perform a manipulation that leads to an...

ROS-20260929-73-0119

The vulnerability of the f2fswritecachepages function in the fs/f2fs/data.c module of the F2FS file system support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: dotnet9.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet9.0 Issue Correction...

SUSE CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...