CVE-2026-83492: Improper Input Validation

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2026-82858: Insufficient Verification of Data Authenticity

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

CVE-2026-76985: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the two option lists of a Palette, escapes the id and the display value of each option according to the escape-model-strings...

CVE-2026-81779: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

Important: iperf3

Issue Overview: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive...

ALSA-2026:61680 Important: iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fixes: iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

Skia Confidential Data Access

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Skia Confidential Data Access

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Important: iperf3

Issue Overview: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive...

PT-2026-83806

Name of the Vulnerable Software and Affected Versions Apache Wicket versions 1.4.0 through 8.18.0 Apache Wicket versions 9.0.0 through 9.23.0 Apache Wicket versions 10.0.0 through 10.10.0 Description Improper neutralization of input during web page generation occurs in the...

Metrics component DoS

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

File Input Component DoS

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome DoS

The vulnerability in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

Linux TIPC Protocol Heap Buffer Overflow DoS

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...

amdgpu_userq_wait_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqwaitioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to incorrect input validation. Exploiting this vulnerability could allow a...

Input component in Google Data Compromise

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential information and influence data integrity through a specially created HTML page...

Extensions Component Confidential Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and affect the integrity of that data...

amdgpu_userq_signal_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqsignalioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to improper input data validation. Exploiting this vulnerability could...