JLSEC-2026-700 Out-of-bounds heap read during SM2/SM3 certificate signature verification

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...

JLSEC-2026-723 Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion

Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size handling of the AuthorityKeyIdentifier extension...

GHSA-HGJX-R89M-M7V4

creationtimestamp| type| source ---|---|--- 2026-07-14 21:12:44+00:00| seen| https://gist.github.com/alon710/2ffb041b6fdd6557a249f765c7133d25...

CVE-2026-58617

creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqn2yvy7q72t 2026-07-14 22:02:40+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:12+00:00| seen|...

CVE-2026-45068

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...

CVE-2026-59891

creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyusdtuq25 2026-07-22 16:43:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarfiguws2h 2026-07-22 16:43:35+00:00| seen|...

CVE-2026-48348 Animate | Incorrect Authorization (CWE-863)

Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a maliciou...

CVE-2026-48069 @grpc/grps-js: An incoming malformed compressed message can cause a client or server crash

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming compressed message can cause a client or server process that uses @grpc/grpc-js to crash. This issue is fixed in...

CVE-2026-50659 .NET Spoofing Vulnerability

...

CVE-2026-50528 .NET Security Feature Bypass Vulnerability

...

CVE-2026-50526 .NET Tampering Vulnerability

...

MINI-88C7-5J33-QC2V

Bulletin has no description...

MINI-Q6C5-9JFP-H328

Bulletin has no description...

MINI-9J9P-QHH8-F5MR

Bulletin has no description...

DEBIAN-CVE-2026-45305

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser::cleanup used regular expressions with overlapping quantifiers for YAML directive, comment, and document marker cleanup,...

DEBIAN-CVE-2026-45073

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear builds a DELETE statement using a namespace derived from the caller-supplied $prefix without binding or escaping it, allowing a caller...

UBUNTU-CVE-2026-45133

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...

UBUNTU-CVE-2026-45063

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $SERVER'SSLCLIENTSDN' with an unanchored regex that matches emailAddress= anywhere in the distinguishe...

CVE-2026-50141

creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...

CVE-2026-50470

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:17+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:33+00:00| seen|...