PHPOffice PhpSpreadsheet resource management error vulnerability

Versions prior to PHPOffice PhpSpreadsheet 1.30.7, versions 2.0.0 through 2.1.19, versions 2.2.0 through 2.4.8, versions 3.3.0 through 3.10.8, and versions 4.0.0 through 5.10.0 contain a resource management error vulnerability. This vulnerability stems from Ods::processTableRow in...

Pascal Buchbinder mod_qos buffer error vulnerability

Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability arises when processing percent-encoded inputs during JSON body filtering; improper termination of strings can lead to reading beyond allocated memory boundaries. As a result,...

FreeRDP async-update DoS

The vulnerability of the async-update component in the RDP client FreeRDP is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Windows Error Reporting Privilege Escalation

The vulnerability of the Windows Error Reporting WER error reporting service in Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Drupal Combined image style resource management error vulnerability

In Drupal, there is a resource management error vulnerability in versions 0.0.0 through 1.0.7. This vulnerability arises from the lack of restrictions or throttling on resource allocation, potentially leading to excessive resource consumption...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142735 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142556 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled...

webpack-dev-server input validation error vulnerability

Versions prior to webpack-dev-server 5.2.7 and versions 6.0.0 through 6.1.0 contain an input validation error vulnerability. This vulnerability arises because when forwarding WebSocket requests via configuration proxy entries, no validation is performed on Host or Origin headers. As a result, the...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

DEBIAN-CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

CVE-2026-113239

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. The issue stems from a range validation error in the SiteIsolation...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

CVE-2026-114050

A flaw was found in vLLM. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted multimodal requests with manipulated identifiers to desynchronize internal processor caches. This desynchronization causes an unhandled token mismatch error in the engine core,...

CVE-2026-78116 Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In datareadyworkhandler drivers/sensor/broadcom/afbrs50/afbrs50.c, a non-STATUSOK return from ArgusEvaluateData calls handleerroronresult, which finalises the request with...

CVE-2026-78116 Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In datareadyworkhandler drivers/sensor/broadcom/afbrs50/afbrs50.c, a non-STATUSOK return from ArgusEvaluateData calls handleerroronresult, which finalises the request with...