vmwgfx Heap Buffer Overflow DoS

The vulnerability of the vmwmksstataddioctl function in the drivers/gpu/drm/vmwgfx/vmwgfxmsg.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability can allow an...

SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3166-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3166-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issu...

PT-2026-63997

Name of the Vulnerable Software and Affected Versions Bold Reports Standalone Report Designer versions 6.3 through 14.1.11 Description A missing filepath validation issue exists in the SVG processing feature within the DataHub module. This path traversal weakness allows unauthenticated attackers ...

NPM: Next.js: Denial of Service in the Image Optimization API using SVGs

NPM: Next.js: Denial of Service in the Image Optimization API using SVGs vulnerability discovered by ? in WordPress Npm next versions = 15.5.0, 15.5.21...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 140.13.0 ESR MFSA 2026-70, bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. CVE-2026-15719: Site isolation issue in the DOM: Navigation component. CVE-2026-16349:...

SUSE-SU-2026:3200-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.13.0 ESR MFSA 2026-70, bsc1271649: - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. - CVE-2026-1634...

SUSE CVE-2026-16413

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16419

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-12968

The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint and accepts SVG files that are stored and served inline, allowing an unauthenticated attacker to upload a malicious SVG whose embedded script executes...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...

CVE-2026-12968

The Product Addons and Product Options With Custom Fields WordPress plugin (referred to as WowAddons ) versions before 1.6.15 is vulnerable to unauthenticated stored XSS . The root cause is an unrestricted file-upload endpoint that accepts SVG files , which are subsequently stored and served inli...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, open-webui, lmcache-cuda-12.8, openstack-horizon-2026.1-fips, label-studio, openstack-horizon-2026.1, superset, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, superset-fips, openstack-horizon-2025.2-fips,...

CVE-2026-64021

A flaw was found in the Linux kernel's drm/xe/oa component. A resource leak occurs in the xeoastreamopenioctl function when an execqueue reference is not properly released. This can cause the execqueue and associated file private state to remain allocated indefinitely, potentially leading to a...

SUSE CVE-2026-16354

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...