kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

CVE-2026-13463

IBM Cloud Pak System 2.3.5.0 is affected by CVE-2026-13463 due to hard-coded credentials in IBM Storage Protect leading to local disclosure of sensitive information via log files. The IBM Security Bulletin (CVE-2026-13463) notes the root cause CWE-798 and specifies a fix: upgrade to version 2.3.5...

CVE-2026-13463 Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

CVE-2026-13463

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

EUVD-2026-50065

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

CVE-2026-13463 Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

SUSE CVE-2026-16730

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...

CVE-2026-47184

A flaw was found in Zeroconf, a Python library for multicast DNS service discovery. An unauthenticated attacker on the local network can send specially crafted multicast DNS responses. This can lead to uncontrolled memory growth, causing memory exhaustion and significantly degrading the performan...

CVE-2026-64212

A flaw was found in the Linux kernel's iwlwifi driver. The iwlmldremovelink function does not properly check for a NULL pointer before dereferencing it. A local attacker could potentially exploit this null pointer dereference, leading to a system crash and a Denial of Service DoS...

CVE-2026-55977

Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

CVE-2026-16414

A flaw was found in Chromecast within Google Chrome. This vulnerability, caused by insufficient validation of untrusted input, allows a local attacker to exploit the system. By sending malicious network traffic, the attacker can potentially perform a sandbox escape, gaining unauthorized access...

CVE-2026-16416

A flaw was found in the Chromecast component of Google Chrome. This integer overflow vulnerability allows a local attacker to potentially perform a sandbox escape by sending malicious network traffic. A sandbox escape could allow an attacker to bypass security restrictions and gain unauthorized...

PT-2026-65597

IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files...

CVE-2026-43806

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service...

CVE-2026-43665

A vulnerability in macOS allows a local attacker to determine the legacy VNC password configured for Screen Sharing . This issue was addressed by implementing additional entitlement checks . The flaw is fixed in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 . Exploitation details are not provided ...

CVE-2026-43665

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing...

EUVD-2026-49556

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory...

CVE-2026-43806

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service...

CVE-2026-43806

A denial of service issue exists in macOS Tahoe versions prior to 26.6 . A local attacker may exploit this vulnerability to cause a system crash or make the system unavailable to its intended users. The issue was addressed by removing the vulnerable code. Users are recommended to update to macOS ...