CVE-2026-59943 Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...

MAL-2026-11156 Malicious code in vtranalytic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce016051a9e9cb604067185042ce49c7426aa1ac01aa606e430c4d1120eec7 Package implements a Telegram-bot-driven remote administration tool that gives whoever holds the configured bot token full control of the installer's...

CVE-2026-62423

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-14052

An insufficient policy enforcement flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501810874...

CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841 CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

EUVD-2026-49732

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841

CVE-2026-11841 describes unauthenticated read/write access to sensitive filesystem areas via AppEngine Fileaccess over HTTP due to improper access controls. The vulnerability exposes a critical filesystem directory, enabling reading and modification of application settings (including customer pas...

CVE-2026-58403

A flaw was found in Hugo, a static site generator. A regression in its virtual filesystem allowed a symlink symbolic link planted within a theme or local mount to bypass security restrictions. This could enable an attacker to read arbitrary files on the system where Hugo is running, leading to...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-112 (ALASKERNEL-5.15-2026-112)

The version of kernel installed on the remote host is prior to 5.15.211-149.251. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-112 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized...

CVE-2026-43765

CVE-2026-43765 concerns macOS where an app could modify protected parts of the filesystem due to inadequate handling of symlinks. Public advisories indicate the issue is resolved by fixes in macOS updates: Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The root cause, as described in the CVE reco...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-41579

A flaw was found in runc, a tool used to run containers. A malicious container image, crafted with a specific type of symbolic link in its /dev directory, can deceive runc. This deception could lead to the deletion of certain files or the creation of predefined symbolic links on the host system...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-64477

A flaw was found in the Linux kernel. When a CPU is taken offline on systems with Sub-NUMA Clustering SNC enabled, a programming error in the resource control resctrl file system can lead to an out-of-bounds memory access. This issue may cause system instability or crashes. The vulnerability aris...

CVE-2026-64296

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker could create a specially crafted directory with malformed name fragments. When the kernel processes this directory, an out-of-bounds read and write can occur, potentially leading to a denial of service or system...

CVE-2026-64533 fs/ntfs3: validate lcns_follow in log_replay conversion

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...

github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted...

RockyLinux 10 : kernel (RLSA-2026:45114)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:45114 advisory. kernel: fs/notify: call exportfsencodefid with sumount CVE-2025-40237 kernel: scsi: core: Wake up the error handler when final completions race against...

SUSE CVE-2026-64357

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...