CVE-2026-21965

Removed by vendor...

CVE-2026-21957

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

From Detection to Remediation: Wiz in Your JetBrains IDE

The Wiz JetBrains IDE plugin is now generally available, enabling developers to fix risks before code leaves their local environment...

PT-2026-3733

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 through 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. An unauthenticated attacker with access to the infrastructure where...

CVE-2025-15538

A flaw was found in Open Asset Import Library Assimp. A local attacker can exploit a use-after-free vulnerability in the Assimp::LWOImporter::FindUVChannels function by manipulating input. This could lead to a limited impact on the confidentiality, integrity, and availability of the affected syst...

ROS-20260119-7304

A vulnerability in the ppsgpioprobe function of the drivers/pps/clients/pps-gpio.c module of the Linux kernel PPS client support driver is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability...

ROS-20260119-7366

A vulnerability in the l3mdevl3out function of the include/net/l3mdev.h module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7305

A vulnerability in the uvcstatusinit function of the Linux operating system kernel is associated with a memory re-release error. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13984)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...

Huawei HarmonyOS Card Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13987)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...

Huawei HarmonyOS Thermal Management Module Multi-threaded Conditional Competition Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS thermal management module, which can be exploited by an attacker to caus...

ROS-20260119-7317

A vulnerability in the dm9000drvremove function of the drivers/net/ethernet/davicom/dm9000.c module - driver supporting Ethernet Davicom network adapters of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to affect the...

ROS-20260119-7356

A vulnerability in the arpxmitfinish function of the net/ipv4/arp.c module of the Linux kernel IPv4 protocol implementation is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protecte...

OPENSUSE-SU-2026:10066-1 gimp-3.0.6-5.1 on GA media

These are all security issues fixed in the gimp-3.0.6-5.1 package on the GA media of openSUSE Tumbleweed...

The system’s vulnerability for data collection and automation process control in Delta Electronics DIAView, which is related to the use of a rigidly encrypted cryptographic key, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Delta Electronics DIAView system for data collection and automation process control is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Huawei HarmonyOS Card Framework Module Multi-threaded Contest Condition Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded race condition vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause availabili...

Huawei HarmonyOS Camera Framework Module Multi-threaded Conditional Competition Vulnerability (CNVD-2026-13992)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Camera Framework module, which can be exploited by an attacker to cause...

ROS-20260119-7326

A vulnerability in the padatafreeshell function of the kernel/padata.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7357

A vulnerability in the neighnotify function of the net/core/neighbour.c module of the Linux kernel's network functions support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

OPENSUSE-SU-2026:10070-1 python-keystonemiddleware-doc-10.12.0-2.1 on GA media

These are all security issues fixed in the python-keystonemiddleware-doc-10.12.0-2.1 package on the GA media of openSUSE Tumbleweed...