98498 matches found
PT-2026-76822
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m...
The vulnerability of the kexec module in the Linux operating system allows a hacker to trigger a system failure.
The vulnerability of the kexec module in the Linux operating system is related to a deficiency in the mechanism for verifying the source of the code. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-76717
Name of the Vulnerable Software and Affected Versions deepmerge-ts versions prior to 8.0.0 Description The library fails to track visited objects or object pairs during the recursive merging of records. When two input values contain self-references at the same property path, the merge logic...
The vulnerability of the rapidio component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the rapidio component in the Linux operating system’s kernel is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-76836
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use-after-free issue, which occurs when a program continues to use a...
PT-2026-76842
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...
PT-2026-76867
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin process and deny service to all Boards users via a custom focalboard SUBSCRIBE TEAM message with a non-string teamId...
The vulnerability of the drivers/hid/hid-logitech-hidpp.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/hid/hid-logitech-hidpp.c component in the Linux operating system is related to incorrect handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100882)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100882 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2....
The vulnerability in the `drivers/media/radio/radio-keene.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/media/radio/radio-keene.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-76850
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...
PT-2026-76841
The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...
MINI-44P3-8QVP-RGFQ
Bulletin has no description...
MINI-9RV6-38HX-8M8V
Bulletin has no description...
MINI-G6F4-X39Q-RPF8
Bulletin has no description...
CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...
EUVD-2026-59950
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...