52826 matches found
CVE-2026-72214
A flaw was found in the Linux kernel's cpcap-battery driver. This vulnerability occurs because a reference to a non-volatile memory nvmem device is not properly released after being acquired. Repeated attempts to read battery properties can exacerbate this issue, leading to a permanent memory lea...
CVE-2026-72170
A flaw was found in the Linux kernel's 9p filesystem. A race condition can occur during file unlinking operations in cacheless mode, where the v9fsdeccount function attempts to decrement a file's link count nlink that has already reached zero. This leads to a kernel warning, which could potential...
MINI-4PQC-4FFF-7VJQ
Bulletin has no description...
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3
CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2
CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...
CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1
CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23930
An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service...
CVE-2026-74982 Denial-of-service in the Widget component
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
EUVD-2026-60695
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74934
Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-75845
ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the setserversetting MCP server-level tool. SetServerSettingTool.execute gates only on the global allowAdmin flag and never checks the caller's role, so in an MCP deployment with allowAdmin=true and a non-roo...
EUVD-2026-60584
SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...
CVE-2026-74903 SiYuan before v3.7.4 Insufficient Access Control via spinBlockDOM
SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...
CVE-2026-72382
A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...
CVE-2026-72231
A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...