CVE-2026-100657

A flaw was found in the Netty STOMP codec. A remote attacker can trigger a memory leak by sending a complete frame body while withholding the terminating null byte, which prevents the allocated buffer from being released even after the connection is closed. Over time, repeated connections can cau...

CVE-2026-93796

A flaw was found in the Linux kernel's iwlwifi driver. When wireless device initialization encounters an error during transmit setup, the cleanup process frees memory allocated for packet reception but fails to clear the corresponding pointers. A local user could trigger subsequent device teardow...

CVE-2026-93266

A flaw was found in the Linux kernel's ARM64 Realm Services Interface RSI component. When copying attestation challenge data into register structures, the kernel performs a write operation across adjacent structure fields, triggering a memory safety warning from the fortified memory copying...

CVE-2026-93264

A flaw was found in the Linux kernel's Elastic Fabric Adapter EFA driver within the Remote Direct Memory Access RDMA subsystem. This vulnerability allows a local user to cause a denial of service DoS or memory corruption by registering a memory region with a specific page count. Due to an incorre...

USN-8831-1: libvirt vulnerabilities

It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-18917 It was discovered that libvirt did not correctly handle symbolic links wh...

CVE-2026-94396

A flaw was found in Elasticsearch. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by triggering excessive resource allocation. By consuming uncontrolled system resources, an attacker can degrade performance or render the service unavailable. Mitigation...

CVE-2026-93793

A flaw was found in the Linux kernel's Intel Wi-Fi driver iwlwifi. The driver does not properly validate the length and structure of transmission command TXCMD responses received from device firmware before parsing the data. A compromised firmware or malicious wireless device can return a malform...

CVE-2026-93791

A flaw was found in the Linux kernel's iwlwifi wireless driver. This vulnerability can lead to a Denial of Service DoS or kernel memory corruption due to an out-of-bounds memory access. When handling block acknowledgment notifications, the driver directly uses a traffic identifier TID provided by...

CVE-2026-93262

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service DoS or potentially escalate privileges through a use-after-free vulnerability in the RAID-5 Partial Parity Log PPL component. During flush operations, the system improperly continues to access an input/output I/O...

CVE-2026-93788

A flaw was found in the Linux kernel's iwlwifi wireless driver. When processing Advanced Configuration and Power Interface ACPI data, the driver does not properly validate the revision index of the WiFi Global Dynamic SAR WGDS table before performing a bit-shift calculation. An invalid revision...

CVE-2026-98163

A flaw was found in the Linux kernel's control group cgroup subsystem. A local user can cause a Denial of Service DoS or potentially achieve privilege escalation by triggering a race condition when reading cgroup process listings while tasks are terminating. Due to improper handling of dying task...

CVE-2026-84971

A flaw was found in MONGOCRYPT. Improper handling of an unexpected value size in the decryption path of the client-side encryption library can lead to a failed internal check. A remote attacker, by placing a specially crafted encrypted value or controlling application responses, could exploit thi...

CVE-2026-91043

The elixir-mint mint HTTP client (versions 1.1.0 before 1.11.0 ) is vulnerable to a denial of service via memory exhaustion. The root cause is that Mint.HTTP2 only enforces the max_header_list_size on the compressed size of inbound header blocks, rather than the decoded list size as required by R...

CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...

EUVD-2026-88218

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of service. Mint.HTTP2 enforces the client's maxheaderlistsize setting only on the compressed size of an inbound header...

EUVD-2026-88216

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101040

A security flaw exists in the HTTP Multipart Form-Data Parser of Ricoh SP 330DN , SP 221 , SP C252SF , and Aficio SP 3500SF (up to 20260813). A remote attacker can perform a manipulation resulting in a denial of service . While the exact component part is unknown, the exploit has been released to...

CVE-2026-101016

A flaw was found in OpenDMARC. An improper error-handling issue in the policy parser allows a remote attacker to cause incorrect policy evaluation or a denial of service DoS. By supplying a crafted Domain-based Message Authentication, Reporting, and Conformance DMARC record containing malformed...

CVE-2026-93787

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem. When a user lists files in a directory on a mounted share, a malicious SMB server can return a crafted directory entry with an oversized filename length. Because the client fails to verify that the filename remains...

CVE-2026-94408

A flaw was found in Elasticsearch. An authenticated remote attacker with high privileges can cause a Denial of Service DoS by triggering excessive resource allocation. Successful exploitation can lead to system resource exhaustion, rendering the service unresponsive or unavailable to legitimate...