CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

Important: libvirt

Issue Overview: A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing...

NoMachine Arbitrary File Deletion

NoMachine versions prior to fixed releases 9.4.14 and 8.22.1 contain an external control of file path vulnerability that allows a local low-privileged attacker to delete arbitrary files as root...

CVE-2026-102371: Invocation of Process Using Visible Sensitive Information

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

CVE-2026-95316: Unchecked Return Value

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium security severity: Low...

CVE-2026-76736: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

Amazon Linux 2 : policycoreutils (ALAS-2026-3949)

The version of policycoreutils installed on the remote host is prior to 2.5-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3949 advisory. A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When...

FreeBSD Security Advisory - FreeBSD-SA-26:64.sysvsem

FreeBSD Security Advisory - Heap out-of-bounds access in semop2. An unprivileged local user can trigger an out-of-bounds access on kernel heap memory, potentially leading to privilege escalation...

PT-2026-102918

Name of the Vulnerable Software and Affected Versions Freedesktop Poppler versions 26.06.0 through 26.08.0 Description An integer overflow occurs in the FoFiTrueType::cvtSfnts function within the fofi/FoFiTrueType.cc file. This issue allows for local execution of an attack. Recommendations Instal...

CVE-2026-79403

Versions of Kilo Code prior to v7.4.1 are vulnerable to an issue that allows a local attacker to achieve arbitrary code execution . The vulnerability is accessible via the permission/allow-everything endpoint. While the technical root cause is not explicitly detailed in the provided documents, th...

Important: dotnet9.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet9.0 Issue Correction...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95358): chromium -- security fixes

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

PT-2026-102626

Name of the Vulnerable Software and Affected Versions Pardus Parental Control versions prior to 0.7.0 Description An incorrect authorization issue exists in the polkit policy. This allows unprivileged local users to disable parental controls with root privileges. An attacker can execute the...

PT-2026-102850

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Improper privilege management in Mojo, a Chromium IPC Inter-Process Communication framework, allows a local attacker to potentially execute arbitrary code outside the sandbox via a loca...

SUSE CVE-2026-91839

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed CR/LF characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile...

SUSE CVE-2026-100310

GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTORPREFIX environment variable without proper privilege checks. A local attacker can exploit this by setting LIBEXTRACTORPREFIX to a directory containing a malicious plugin that executes arbitrary...

CVE-2026-98051

A flaw was found in the Linux kernel's Broadcom ASP 2.0 Ethernet driver. When evaluating whether sufficient transmit buffer space is available for outgoing packets, the driver fails to properly verify all required consecutive descriptor slots. A local user could exploit this flaw by generating...

CVE-2026-97552

A flaw was found in the Linux kernel's XFS file system. An uninitialized variable in the deferred operation handling routine can cause the kernel to return an indeterminate value when processing empty work items during online repair. A local user initiating or interacting with file system repair...

CVE-2026-98045

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain stack retrieval helper functions can perform blocking filesystem operations, but were not properly marked as sleepable. A local user with permission to load BPF programs could exploit this flaw by invoking these...

CVE-2026-98044

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...