ROS-20260928-73-0085

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2026-99940

Name of the Vulnerable Software and Affected Versions Axios versions 1.13.0 through 1.19.x Description In the Node.js environment, the Http2Sessions component fails to implement proper error handling for ClientHttp2Session during the initialization or reuse of HTTP/2 sessions. When a request is...

PT-2026-102335

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description When an application method handler throws an uncaught error, the server includes the error message in the status message sent to the client. This can lea...

PT-2026-102411

Name of the Vulnerable Software and Affected Versions Zephyr versions 4.3.0 through 4.4.x Description The native BSD-socket layer incorrectly records pending asynchronous socket errors by storing them in the user data field of the net context structure. This field is also used by the network stac...

PT-2026-99874

Name of the Vulnerable Software and Affected Versions connect-xcors npm package affected versions not specified Description An origin validation error in the middleware allows an attacker to bypass origin verification. This flaw enables the execution of cross-domain authenticated requests, which...

ROS-20260928-73-0040

The vulnerability of the kernel/sys.c module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0102

The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260928-73-0020

The vulnerability of the mm/hugetlb.c module in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0074

The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0084

The vulnerability of the Linux operating system’s components such as drivers, GPU, DRM, AMD, and AMDGPU cores is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0099

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0006

The vulnerability of the drivers/usb/host/max3421-hcd.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0038

The vulnerability of the parseapplysbmountoptions function in the Linux operating system is related to errors that occur when a string or array is terminated with the NULL character. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0047

The vulnerability of the xfrmstatedeletetunnel function in the net/xfrm/xfrmstate.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-99953

Name of the Vulnerable Software and Affected Versions ip-address versions 10.2.0 through 10.5.0 Description The Address6.isPrivate classifier in src/ipv6.ts fails to recognize the NAT64 local-use range 64:ff9b:1::/48. Consequently, the isPrivate, isLoopback, and isLinkLocal functions return false...

CVE-2026-101915: Server-generated Error Message Containing Sensitive Information

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught error, the server includes its error message in the status message sent to the client. The thrown error message is...

ROS-20260928-73-0097

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft Office Memory Reclamation Code Execution

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...