CVE-2026-86335 LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse

Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests...

CVE-2026-86335

Canonical LXD on Linux versions prior to 5.0.10, 5.21.8, and 6.10 is vulnerable to a Missing Authorization flaw in the imageDownload function. A project-restricted client can steal private images from other projects by leveraging local fingerprint reuse during image or instance import requests. T...

Pixmeo OsiriX MD 资源管理错误漏洞

Pixmeo OsiriX MD is a medical image processing software from Pixmeo designed for DICOM image analysis and 3D reconstruction. Pixmeo OsiriX MD suffers from a resource management error vulnerability that originates from local reuse after release, which could result in memory corruption or a system...