CVE-2026-93518 X.Org Server XKB ResizeKeyType Numeric Truncation

An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server...

CVE-2026-93518

The X.Org X server (before version 21.1.25) and XWayland (before version 24.1.14) are vulnerable to an integer truncation issue in the XkbResizeKeyType() function. This flaw occurs during memory allocation calculations within the X Keyboard Extension (XKB) , causing the server to allocate an unde...

CVE-2026-93518 X.Org Server XKB ResizeKeyType Numeric Truncation

An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server...

EUVD-2026-112122

An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X server...

Security Bulletin: Security Vulnerabilities were found in IBM Semeru Runtime Certified Edition provided with IBM Verify Directory

Summary Security Vulnerabilities were addressed in IBM Semeru Runtime Certified Edition provided with IBM Verify Directory Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed...

CVE-2026-99118

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow before calculating the firmware payload size. Reject zero-length payloads and zero MMI...

CVE-2026-99145 drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change Pinned bos have their pages removed from the shrinker's shrinkable / purgeable counts on pin, and added back on unpin according to the bo's purgeable...

CVE-2026-99145

The Linux kernel 's drm/xe driver contains a vulnerability where pinned buffer objects (bos) incorrectly handle page accounting during purgeable state changes. The function xe_bo_set_purgeable_shrinker() unconditionally transfers pages between shrinkable and purgeable counts. If a pinned bo's pur...

CVE-2026-99145 drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change Pinned bos have their pages removed from the shrinker's shrinkable / purgeable counts on pin, and added back on unpin according to the bo's purgeable...

CVE-2026-99118

The Linux kernel (specifically the drm/i915/dmc component) addressed a vulnerability involving the parsing of DMC firmware payloads . The root cause was a lack of validation when converting DMC firmware size from dwords to bytes, which could lead to issues during payload size calculation. To reso...

CVE-2026-99118 drm/i915/dmc: Harden DMC firmware payload parsing

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow before calculating the firmware payload size. Reject zero-length payloads and zero MMI...

CVE-2026-99118 drm/i915/dmc: Harden DMC firmware payload parsing

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow before calculating the firmware payload size. Reject zero-length payloads and zero MMI...

CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86380

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-118370

libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow...

EUVD-2026-111976

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86380

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86380

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86380

Dell PowerProtect Data Domain is affected by an Integer Overflow or Wraparound vulnerability (CWE-190) in several release versions, including Feature Releases 7.7.1.0 through 8.8, LTS2024 (7.13.1.0–7.13.1.80), LTS2025 (8.3.1.0–8.3.1.40), and LTS2026 (8.6.1.0–8.6.1.20). A high privileged attacker ...

CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...