CVE-2026-107733 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

CVE-2026-105825

A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause a denial of service DoS by submitting an image containing a specially crafted Extensible Metadata Platform XMP profile. Due to improper error handling during profile processing, the application terminates the...

CVE-2026-105398

A flaw was found in ImageMagick. An attacker can exploit a heap buffer overflow vulnerability by supplying crafted input during calls to the GetVirtualPixels application programming interface API. This issue allows the attacker to overwrite heap memory, leading to an application crash and resulti...

CVE-2026-98184

A flaw was found in the Linux kernel's mwifiex driver. An integer truncation vulnerability occurs during authentication frame length calculation, causing the driver to allocate an undersized memory buffer. A local attacker with network administration privileges can exploit this issue by submittin...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-104628

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

CVE-2024-6387-Mitigation-Ansible-Playbook

CVE-2024-6387 Mitigation Ansible Playbook An Ansible Playbook to mitigate the risk of the regreSSHion RCE CVE-2024-6387 vulnerability until platforms update OpenSSH to a non-vulnerable version. The mitigation applied here is based on the Mitigation Advice provided by Red Hat. As noted there: Noti...

CVE-2026-107727 Strawberry legacy graphql-ws retains naturally completed subscription slots

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-107727 Strawberry legacy graphql-ws retains naturally completed subscription slots

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-107727

The Strawberry GraphQL library (versions 0.312.3 through 0.327.2 ) contains a vulnerability in the legacy graphql-ws subscription handler located in strawberry/subscriptions/protocols/graphql_ws/handlers.py. The root cause is that the handler fails to remove naturally completed operations from se...

CVE-2026-107727

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphqlws/handlers.py does not remove naturally completed operations from self.tasks and self.subscriptions. When...

CVE-2026-84230

IBM Guardium Data Protection version 12.2.2 is vulnerable to a denial of service (DoS) attack. The root cause is a race condition (CWE-362) triggered by concurrent unsynchronized writes to a shared map. A remote attacker can exploit this to cause the service to become unavailable. IBM has release...

CVE-2026-84230 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...

CVE-2026-84247 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-104628 Satel Netco Design Inefficient Regular Expression Complexity

Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application...

CVE-2026-104628

Satel Netco Design versions prior to v2.1.7 are vulnerable to an inefficient regular expression complexity vulnerability (CWE-1333). An authenticated user with Viewer privileges can submit specially crafted search input that triggers excessive processing. This flaw can lead to a degradation of th...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

DEBIAN-CVE-2026-107708

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

AZL-106836 CVE-2026-107708 affecting package krb5 1.21.3-5

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

CVE-2026-107708

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...