CVE-2026-23431

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in amlspisgprobe In amlspisgprobe, ctlr is allocated by spialloctarget/spiallochost, but fails to call spicontrollerput in several error paths. This leads to a memory leak whenever the driver...

JLSEC-2026-47

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

JLSEC-2026-43

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

CVE-2026-5322

A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d. This affects the function Request of the file src/servers/database/server.js of the component MCP Handler. The manipulation leads to sql injection...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the cipher.KeyUnwrap function when decrypting a JSON Web Encryption JWE object with a key wrapping algorithm ending in 'KW', except for 'A128GCMKW', 'A192GCMKW', and 'A256GCMKW' and the encryptedkey field is empty...

EUVD-2026-18560

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

The vulnerability of the CI_handle() function in the drivers/staging/media/av7110/av7110_ca.c driver module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the CIhandle function in the drivers/staging/media/av7110/av7110ca.c driver module related to Linux kernel media preparation functions is associated with unauthorized access to the indexed resource. Exploiting this vulnerability could allow an attacker to cause service failur...

The vulnerability of the rtw89_scan_get_6g_disabled_chan() function in the drivers/net/wireless/realtek/rtw89/fw.c driver module of the Realtek wireless adapter support library in the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the rtw89scanget6gdisabledchan function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter support driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __mem_cgroup_uncharge_folios() function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the memcgroupunchargefolios function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function rpmsg_register_device_override() in the drivers/rpmsg/rpmsg_core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the rpmsgregisterdeviceoverride function in the drivers/rpmsg/rpmsgcore.c file of the Linux kernel is related to errors during linkage updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the netlink_ack_tlv_len() function in the net/netlink/af_netlink.c module allows a hacker to cause a service failure within the Linux operating system’s socket monitoring interface.

The vulnerability of the netlinkacktlvlen function in the net/netlink/afnetlink.c module, which supports NETLINK socket monitoring interfaces in Linux operating systems, is related to errors in deleting confidential information before reusing it. Exploiting this vulnerability could allow an...

The vulnerability of the davinci_fifo_data_trans() function in the drivers/mmc/host/davinci_mmc.c module of the Linux operating system’s card support driver framework allows a malicious actor to cause a service failure.

The vulnerability of the davincififodatatrans function in the drivers/mmc/host/davincimmc.c module of the Linux kernel’s card support driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_ring_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions cdns3_gadget_ep_enable() and cdns3_gadget_ep_dequeue() in the drivers/usb/cdns3/cdns3-gadget.c driver module of the Linux operating system’s USB device drivers allow a malicious actor to cause service failures.

The vulnerability of the cdns3gadgetepenable and cdns3gadgetepdequeue functions in the drivers/usb/cdns3/cdns3-gadget.c driver for USB device drivers in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-32468

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

ROS-20260403-73-0018

A vulnerability in the tlsdodecryption function net/tls/tlssw.c of the Linux kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker acting remotely to increase his privileges...

PT-2026-30200

Name of the Vulnerable Software and Affected Versions NASA cFS versions up to 7.0.0 Description A flaw exists in NASA cFS up to version 7.0.0 within the CCSDS Packet Header Handler component. Specifically, the CFE MSG GetSize function in the file apps/to lab/fsw/src/to lab passthru encode.c is...

PT-2026-30272

Name of the Vulnerable Software and Affected Versions SandboxJS versions prior to 0.8.35 Description SandboxJS has a flaw where direct assignment to global objects is blocked, but this protection can be bypassed through a callable constructor path using this.constructor.calltarget, attackerObject...