91818 matches found
CLSA-2026-1792753768 Fix of 29 CVEs
CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...
CVE-2026-114645
A flaw was found in mongo-c-driver. An integer wraparound in the Windows-native Kerberos authentication code can occur when an excessively long credential value is supplied in the client connection configuration. An attacker capable of modifying this client configuration can cause the driver to...
expat security update
An update is available for expat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: expat:...
RLSA-2026:88247 Important: expat security update
Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...
Pillow: Reachable Undefined Behavior In Native Integer Operations, Potentially Leading To Denial Of Service Or Logic Int
Summary Affected Object and Source Package: Pillow 12.3.0 Source: PyPI sdist pillow-12.3.0.tar.gz SHA-256: 3b8182a766685eaa002637e28b4ec8d6b18819a0c71f579bf0dbaa5830297cce Sink: src/imaging.c:2809:15, xsize += dx Details The code in Pillow 12.3.0 is: for xsize = 0; text; text++ int dx =...
Updated jq package fixes security vulnerabilities
Embedded NUL truncates top-level jq programs loaded with -f. CVE-2026-41256 Signed-int overflow in stackreallocate jq VM stack. CVE-2026-41257 Wild stack write via signed-integer overflow in decNumber D2U macro. CVE-2026-43894 Embedded NUL in jq import paths causes local redaction-policy bypass a...
Updated msgpack package fixes a security vulnerability
Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation. CVE-2026-72854...
Exploit for CVE-2026-110264
gitlab-firing-range Authorized security-research firing range...
Exploit for CVE-2026-110264
gitlab-firing-range Authorized security-research firing range...
CVE-2026-98731
A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An integer overflow vulnerability exists in the packet reception function when calculating the total length of incoming Bluetooth frames. An adjacent attacker within Bluetooth range could exploit this flaw by transmitting special...
kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound
A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...
CLEANSTART-2026-PT94864 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
Security vulnerability affects the argo-cd package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...
CVE-2026-98726
A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express multipath subsystem. A malicious NVMe device can provide crafted Asymmetric Namespace Access ANA log data that triggers an integer underflow during buffer bounds validation. This failure leads to an out-of-bounds memory read,...
GitLab 19.5.0 Security Exposure Scanner
GitLab versions prior to the specified patched releases contain an integer overflow issue in the regular expression compiler. This tool passively fingerprints GitLab instances, identifies exposed versions, and reports their CVE-2026-110264 patch status...
ROS-20261023-73-0011
The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20261023-73-0060
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because gntallocioctlalloc fails to verify whether the number of grants requested by a user exceeds the global limit prior to allocation; this m...
AlmaLinux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
Linux Distros Unpatched Vulnerability : CVE-2026-113681
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the...
AlmaLinux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792791669)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792791669 advisory. - xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling CVE-2026-88812 -...