SUSE CVE-2026-76163

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...

SUSE CVE-2026-94623

vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in...

ROS-20260923-73-0003

The vulnerability in python-black is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260923-73-0086

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0045

The vulnerability of the getaliasquirk function in the sound/usb/card.c module, which is part of the Linux operating system’s USB device support mechanism, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0051

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-90950: Protection Mechanism Failure

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-96675: Improper Validation of Array Index

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...

The vulnerability of the Imf::InputFile::readPixels() method in software for storing images in OpenEXR format with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

Vulnerability of NVIDIA Display Driver and Guest Driver: These drivers for NVIDIA’s virtual graphics processors allow attackers to cause system failures and disclose sensitive information.

The vulnerability of NVIDIA Display Driver and Guest drivers for virtual graphics processors from NVIDIA is related to the disclosure of information. Exploiting this vulnerability can allow attackers to cause system failures and disclose protected information...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insecure initialization. Exploiting this vulnerability can allow an attacker to cause system failures...

Vulnerability of NVIDIA Display Driver and Guest Driver: NVIDIA’s virtual graphics processor drivers allow attackers to trigger service failures.

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to the state of the race when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Imf::InputFile::readPixels() method in software for storing images in OpenEXR format with a wide dynamic range of brightness levels allows a hacker to cause a service failure.

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

The vulnerability in the Intel Media SDK library, related to the execution of operations beyond buffer boundaries in memory, allows a malicious actor to cause a service failure.

The vulnerability of the Intel Media SDK library lies in improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Linux Toolkit Theming component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the Linux Toolkit Theming component in Google Chrome and Microsoft Edge relates to insufficient input validation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the WebShare component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the WebShare component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge browsers, related to insufficient input validation, allows attackers to trigger a service failure.

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...