ROS-20260720-73-0033

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-63762: NULL Pointer Dereference

SurrealDB before v2.6.1 and before v3.0.0-beta.3 contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability disabled by default. Any user able to execute arbitrary queries — including unauthenticated guests when...

CVE-2026-15813: Out-of-bounds Write

A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets...

Linux Distros Unpatched Vulnerability : CVE-2026-63861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe...

Linux Distros Unpatched Vulnerability : CVE-2026-15813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 stable and 1.31.3 mainline, and in NGINX Plus 37.0.3.1; anyone on an...

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861

The CVE covers a Linux kernel SPI subsystem issue: the mtk-snfi (on-host NAND ECC) engine registered during mtk_snand_probe() lacked proper teardown on probe unwind and remove-time cleanup. The fix introduces a devm cleanup action so nand_ecc_unregister_on_host_hw_engine() is automatically invoke...

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

EUVD-2026-45545

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-53375 drm/amdgpu/vce: Prevent partial address patches

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

EUVD-2026-45448

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

Server-Side Request Forgery (SSRF)

com.arcadedb:arcadedb-engine is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the IMPORT DATABASE statement accepting unvalidated source URLs without requiring administrative privileges, which allows an authenticated attacker to issue requests to arbitrary internal o...

SUSE SLED15 / SLES15 Security Update : python-python-engineio (SUSE-SU-2026:3085-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3085-1 advisory. - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through t...

Fedora 43 : chromium (2026-32e3e23696)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32e3e23696 advisory. Update to 150.0.7871.124 CVE-2026-15764: Use after free in Ozone CVE-2026-15765: Use after free in Ozone CVE-2026-15766: Uninitialized Use in Skia...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.dstu3.support (>=6.9.5, <=6.9.8) +5 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version =6.9.5, =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

health.matchbox:matchbox-engine (>=4.1.8, <=4.1.10), org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=2.2.7, <=2.2.8) +2 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.7, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.9.7, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...