CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

DEBIAN-CVE-2026-47599

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

DEBIAN-CVE-2026-47598

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...

DEBIAN-CVE-2026-47603

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47584

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-47603

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47603

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47549

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-90148

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...

CVE-2026-47598

The NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path . An unprivileged local user can trigger a use-after-free condition by exploiting a race condition between asynchronous event delivery and a file close operation. Successful explo...

CVE-2026-47602

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

OESA-2026-4180 jasper security update

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Security Fixes: A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file...

OESA-2026-4179 jasper security update

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Security Fixes: A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file...

OESA-2026-4181 jasper security update

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Security Fixes: A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file...

OESA-2026-4169 gdal security update

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

OESA-2026-4170 gdal security update

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

OESA-2026-4161 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function...

OESA-2026-4159 multipath-tools security update

This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...