EUVD-2026-62483

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

CVE-2026-71694

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

ROS-20260819-73-0054

The vulnerability in Tomcat10 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-78542

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

PT-2026-78381

Name of the Vulnerable Software and Affected Versions Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark version 1.2 Description A flaw in the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, and CSRFile logic within the...

CVE-2026-71694

The Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 (specifically 2d08d0d8b4563212175212f9db0e69f6e68c9619) contains a vulnerability in the ProcessorFuzz BOOM benchmark within the file Benchmarks/Verilog/SmallBoomTile_v1.2_state.v. A remote attacker can execute arbitrary code d...

ROS-20260819-73-0053

The vulnerability in Tomcat is related to deficiencies in handling error situations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260819-73-0055

The vulnerability in Tomcat11 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-102686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102686 advisory. Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versionsfrom 8.2. before 8.2.33, from 8.3. before 8.3.3...

Adobe Lightroom Classic Code Execution

The vulnerability of the Adobe Lightroom Classic graphic editor is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-74955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

SUSE CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

CVE-2026-15792

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service DoS, making the BuildKit service unavailable. Mitigation Avoid building container images using...

CVE-2026-53458 Blueprint Studio API exposed internal exception details

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...

CVE-2026-53458 Blueprint Studio API exposed internal exception details

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...

CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

CVE-2026-52737

Zebra (v4.4.1 and earlier) is vulnerable to a DoS: a malicious unauthenticated P2P peer serves a block with an above-lookahead coinbase height, triggering a 67-second global sync restart that cancels honest peer downloads indefinitely. The root cause is that BlockDownloadVerifyError::AboveLookahe...

DEBIAN-CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

SUSE CVE-2026-68457

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SETSPARSE, SETZERODATA and SETCOMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or fileattr helpers with the current ksmbd worker credentials. Those helpers...

CVE-2026-72205

A flaw was found in the Linux kernel's NTFS filesystem driver. When an attempt to mount an NTFS volume fails, the ntfsfillsuper function's error handling path does not properly free all volume-wide resources. This oversight leads to a silent resource leak, where memory and other resources...