CVE-2026-72275

A flaw was found in the Linux kernel's fbdev broadsheetfb component. This issue arises when memory allocated for page references is not properly released during an error in the broadsheetfbprobe function. This oversight could lead to a memory leak, potentially allowing a local attacker to cause...

CVE-2026-72100

A flaw was found in the Linux kernel's dm-integrity component. This issue occurs when the dmintegritychecklimits function fails, leading to a resource remaining locked. A local attacker could potentially trigger this condition, resulting in a system deadlock and a Denial of Service DoS...

CVE-2026-72403

A flaw was found in the ALSA FireWire Control Protocol FCP component of the Linux kernel. A local attacker with a specially crafted USB device could trigger a NULL pointer dereference. This occurs because the fcpfindfcinterface function attempts to access an endpoint descriptor from a malformed U...

CVE-2026-16874: Improper Privilege Management

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles...

CVE-2026-16855: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow...

CVE-2026-16891: Out-of-bounds Read

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-15961: Use of Externally-Controlled Format String

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...

PT-2026-78660

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

PT-2026-78614

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow...

PT-2026-78542

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations...

PT-2026-78659

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

CVE-2026-16883: Out-of-bounds Read

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-76037

Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-53759 linuxfabrik-lib: Insecure creation of SQLite databases

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, dbsqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who...

EUVD-2026-61490

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, dbsqlite.py created SQLite databases at predictable paths in the shared /tmp directory and followed attacker-created symbolic links at those paths. An attacker who...

CVE-2026-76037

A link following vulnerability exists in the CredentialProvider component of Google Chrome on Windows . This flaw allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. The issue affects versions prior to 151.0.7922.169 . As a Chromium-based browser...

CVE-2026-72298

A flaw was found in the Linux kernel's qrtr network component. On 32-bit systems, a 32-bit integer overflow can occur in the qrtrendpointpost function when processing an incoming packet. This overflow can bypass a size validation check, leading to an out-of-bounds write and causing the kernel to...

CVE-2026-72274

A flaw was found in the Linux kernel's fbdev hecubafb module. A local attacker could exploit this by triggering an error path during the initialization of the hecubafb module. This could lead to a memory leak, potentially causing a denial of service due to resource exhaustion...

CVE-2026-72243

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

CVE-2026-72194

A flaw was found in the Linux kernel's NTFS3 filesystem driver. A local attacker could craft a malicious NTFS image with circular index node references. When this filesystem is mounted and a specific file is deleted, it can trigger unbounded recursion in the indxfindbuffer function, leading to a...