CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-18825: Origin Validation Error

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

PT-2026-99806

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A remote attack can be initiated against the DMARC Record Parser component. The issue resides in the opendmarc util cleanup function within the libopendmarc/opendmarc util.c library, where a...

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

PT-2026-99738

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description An issue exists in the Internationalized Domain Name Handler component within the opendmarc policy query dmarc function located in the libopendmarc/opendmarc policy.c library. A remote attacker can...

ROS-20260928-73-0099

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-99874

Name of the Vulnerable Software and Affected Versions connect-xcors npm package affected versions not specified Description An origin validation error in the middleware allows an attacker to bypass origin verification. This flaw enables the execution of cross-domain authenticated requests, which...

ROS-20260928-73-0040

The vulnerability of the kernel/sys.c module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0102

The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260928-73-0085

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2026-99940

Name of the Vulnerable Software and Affected Versions Axios versions 1.13.0 through 1.19.x Description In the Node.js environment, the Http2Sessions component fails to implement proper error handling for ClientHttp2Session during the initialization or reuse of HTTP/2 sessions. When a request is...

PT-2026-102335

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description When an application method handler throws an uncaught error, the server includes the error message in the status message sent to the client. This can lea...

PT-2026-102411

Name of the Vulnerable Software and Affected Versions Zephyr versions 4.3.0 through 4.4.x Description The native BSD-socket layer incorrectly records pending asynchronous socket errors by storing them in the user data field of the net context structure. This field is also used by the network stac...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-99953

Name of the Vulnerable Software and Affected Versions ip-address versions 10.2.0 through 10.5.0 Description The Address6.isPrivate classifier in src/ipv6.ts fails to recognize the NAT64 local-use range 64:ff9b:1::/48. Consequently, the isPrivate, isLoopback, and isLinkLocal functions return false...

CVE-2026-101915: Server-generated Error Message Containing Sensitive Information

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught error, the server includes its error message in the status message sent to the client. The thrown error message is...

ROS-20260928-73-0097

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft Office Memory Reclamation Code Execution

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PDF viewing and editing programs Memory Reclamation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...