PT-2026-70295

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of overlap between protected memory ranges in some microcode within Ring 0: Hypervisor may allow an escalation of privilege. An authorized adversary with privilege...

PT-2026-70283

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description A null pointer dereference within Ring 0 the most privileged level of the CPU of the kernel may lead to a denial of service. An unprivileged,...

PT-2026-70275

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

PT-2026-70293

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper authentication within Ring 0 the most privileged level of the CPU of the kernel may allow an information disclosure. A system software adversary with...

CVE-2026-20775: Uncaught Exception

Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...

PT-2026-70274

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of values within Ring 0 the most privileged level of the CPU, used by the Kernel, Hypervisor, and Bare Metal OS may allow an escalation of privilege. A privileged...

CVE-2026-20917: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

CVE-2025-35973: Improper Handling of Values

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-20727: NULL Pointer Dereference

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occu...

CVE-2025-31356: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

PT-2026-70271

Name of the Vulnerable Software and Affected Versions IntelR Trust Domain Extensions IntelR TDX affected versions not specified Description Insufficient verification of data authenticity within Ring 0: Hypervisor may lead to information disclosure. A system software adversary with privileged user...

2026.3 IPU, Intel® Processor Firmware Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20760 Description: Improper handling of overlap between protected memory ranges ...

2026.2 IPU,  Intel® Trust Domain Extensions (Intel® TDX) module Advisory

Summary: A potential security vulnerability for some Intel® TDX modules may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31356 Description: Insufficient verification of data authenticity for some...

2026.3 IPU, Intel® Processor Load Value Injection Zero Data Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20917 Description: Exposure of sensitive information caused by incorrect da...

Intel® Processor Firmware Advisory - 01428

Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35973 Description: Improper handling of values for some Intel® Processors...

2026.3 IPU,  Intel® Trust Domain Extensions (Intel® TDX) module Advisory

Summary: Potential security vulnerabilities for some Intel® TDX modules may allow information disclosure, escalation of privilege, or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20885 Description:...

CVE-2026-68154 libceph: reject zero bucket types in crush_decode

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...

...[ More ]

A proof of concept exploit for a time-of-check to time-of-use local privilege escalation vulnerability in libcap version 2.77. The vulnerability exists in capsetfile, which checks a supplied pathname with lstat before independently resolving the same pathname when calling setxattr. Because setxat...

PT-2026-76413

These are all security issues fixed in the java-1 8 0-openj9-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DSA 6420-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2026 https://www.debian.org/security/faq -...