CVE-2026-9040 Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose...

EUVD-2026-72794

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to sensitive kernel...

Win32k Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

Windows License Manager Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

Microsoft Excel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-78130

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:18+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-15 20:00:58+00:00| seen|...

CVE-2026-78131

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

kernel: vfio/pci: Clean up DMABUFs before disabling function

A flaw was found in the Linux kernel's vfio/pci subsystem. During device shutdown, an improper order of operations in cleaning up Direct Memory Access Buffers DMABUFs before disabling the function creates a brief window. In this window, a device's Base Address Registers BARs could still be access...

CVE-2026-86207

creationtimestamp| type| source ---|---|--- 2026-09-08 12:12:11+00:00| seen| https://bsky.app/profile/stephenfewer.bsky.social/post/3muyymguz422s 2026-09-08 16:56:24+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117236471187412679 2026-09-09 00:00:04+00:00| confirmed|...

kernel: nvmet-auth: validate reply message payload bounds against transfer length

A flaw was found in the Linux kernel's nvmet-auth component. A remote attacker, by sending a specially crafted NVMe-oF NVMe over Fabrics authentication reply message, can cause an out-of-bounds read in the kernel's memory. This vulnerability, exploitable pre-authentication, can lead to the...

CVE-2026-67367

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrnvi23q2f 2026-09-08 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkexsema2f 2026-09-18 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-62645

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrn57bab2n 2026-09-08 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117234953398567351 2026-09-08 10:30:27+00:00| seen|...

CVE-2026-77132

creationtimestamp| type| source ---|---|--- 2026-09-08 09:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ea6eeuqonpoxa 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CVE-2026-74859

creationtimestamp| type| source ---|---|--- 2026-09-08 09:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/djsi4xpzhl7nj...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

CVE-2019-1010022

creationtimestamp| type| source ---|---|--- 2026-09-08 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muymr7evht2t...

CVE-2026-71646

creationtimestamp| type| source ---|---|--- 2026-09-08 08:22:24+00:00| seen| https://gist.github.com/DongJiaxin0422/747d8e6c8afc0a364454b741b39bb98c...

WordPress User Profile Builder plugin <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability

Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability discovered by daroo in WordPress Plugin Profile Builder versions = 3.15.7...

GHSA-P498-V437-472G

creationtimestamp| type| source ---|---|--- 2026-09-08 06:19:12+00:00| seen| https://gist.github.com/citadelculture/59ba3685c4ac125fd240e01b8fcee60a 2026-09-08 06:19:13+00:00| seen| https://gist.github.com/citadelculture/5ad0a838a902eb1cbf2ff2ff33472c61 2026-09-08 06:19:13+00:00| seen|...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...