CVE-2026-74359

A flaw was found in the Linux kernel's configfs component. This vulnerability occurs because a memory pointer is not properly cleared after a failure, leading to a 'use-after-free' condition. A local attacker could exploit this by interacting with the affected directory, which could cause memory...

CVE-2026-53585

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...

CVE-2026-74325

A flaw was found in the wifi: mt76 driver within the Linux kernel. This vulnerability occurs because the mt76putvifphylink function improperly deallocates memory for offchannel links. An attacker could exploit this by causing the system to access memory after it has been freed, leading to a...

CVE-2026-55586

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...

CVE-2026-18280

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2026-18262

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-63633

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

EUVD-2026-63469

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...

CVE-2026-55586

SumatraPDF 3.6.1 and earlier (Windows) contains a heap out-of-bounds write in the vendored CHMLib LZX decompressor. A crafted CHM file can supply malformed Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, internal nodes are written via next_symbol before val...

CVE-2026-55586 SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...

CVE-2026-13121

The flaw exists in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function allowing a local low-privileged attacker to escalate privileges and execute arbitrary code as SYSTEM. CVSS 7.8 HIGH. Exploitation in the wild is not reported in the provided documents. Patch...

CVE-2026-74302

A flaw was found in the Bluetooth subsystem of the Linux kernel. During the unregistration of a Bluetooth device, the system fails to properly disable timers before freeing the associated memory. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has...

CVE-2026-18284

Sony XAV-9500ES's crash dump handler fails to validate a user-supplied string before passing it to a system call, enabling a local low-privileged attacker to inject commands and escalate to root. CVSS 7.8 HIGH; exploitation details are not provided in the documents.

CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

EUVD-2026-63427

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2026-18280

CVE-2026-18280 is a buffer overflow in the gpsd daemon of the Sony XAV-9500ES car audio device, specifically in the handling of NMEA data . The root cause is the lack of proper validation of user-supplied data length before copying it to a fixed-length buffer. A physically present attacker can ex...

CVE-2026-18272

The Kenwood DNR1007XR's startUpdateProcess() function passes a user-supplied string directly to a system call without validation, enabling command injection as root. Exploitation requires physical access (CVSS 6.8 MEDIUM), and no firmware fix or workaround is currently available per ZDI-CAN-28981...

CVE-2026-18269

CVE-2026-18269 is an out-of-bounds write vulnerability in the tchdr_bytestream_read function of the Kenwood DNR1007XR car audio/navigation unit. The root cause is insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer. A physically present attacker can...

EUVD-2026-63415

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...