ROS-20260911-73-0201

The vulnerability in the Google Chrome web browser is related to access control errors. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially created HTML page...

ROS-20260911-73-0157

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0229

The vulnerability of the Glic component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-90288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the apple-soc component of the cpufreq subsystem where the apple soc cpufreq init function adds Operating Performance Point OPP tables from firmware but fails to remov...

ROS-20260911-73-0049

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0237

The vulnerability in Chromium is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260911-73-0030

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-90268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the param set charp function where character pointer parameters are stored in allocated memory. When a parameter is updated, the previous value is released before the...

PT-2026-96597

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CB OFFLOAD after the worker kthread completes. When the post-copy vfs fsync range or...

PT-2026-96556

In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect md mode when metadata dst allocation fails In collect md mode ipip tunnel rcv returns 0 without freeing the skb when ip tun rx dst fails to allocate the metadata dst. ipip rcv and mplsip rcv are...

CVE-2026-89706: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...

PT-2026-90301

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the auxdisplay component when CONFIG CHARLCD BL FLASH is enabled. The charlcd init function schedules bl work before charlcd register calls misc register. If the...

ROS-20260911-73-0013

The vulnerability of the gfnodetryDestroy function in the MP4Box multimedia platform of GPAC, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to cause a service failure...

PT-2026-90321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs send message locked function moves a message context from the free list to the allocated list before sending a request to the...

USN-8571-2: Apache HTTP Server regression

USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was incomplete due to a missing library symbol, resulting in a regression that could cause Apache HTTP Server to fail to start when HTTP/2 proxying was enabled. This update fixes the problem. We apologize for the inconvenience...

USN-8571-2 apache2 regression

USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was incomplete due to a missing library symbol, resulting in a regression that could cause Apache HTTP Server to fail to start when HTTP/2 proxying was enabled. This update fixes the problem. We apologize for the inconvenience...

UBUNTU-CVE-2026-89045

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read, allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocki...

SUSE CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-88050

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...