UBUNTU-CVE-2026-23236

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFXIOCTLREPORTDAMAGE ioctl does not properly copy data from userspace to kernelspace, and instead directly references the memory, which can cause problems if invalid...

Microsoft Edge (Chromium) < 145.0.3800.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 145.0.3800.82. It is, therefore, affected by multiple vulnerabilities as referenced in the February 26, 2026 advisory. - Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005664)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005664 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: drop short frames While technically some control frames like ACK are shorter...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005581 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: wraparound mbox producer index Driver is not handling the wraparound of the mbox...

PT-2026-23051

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159 Description An improper implementation in WebAudio allows a remote attacker to perform out of bounds memory access via a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-23049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159 Description An integer overflow in the Skia graphics engine within Google Chrome versions prior to 145.0.7632.159 could allow a remote attacker to potentially perform out-of-bounds memory access...

PT-2026-23047

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159 Description An integer overflow in ANGLE, a low-level graphics library, within Google Chrome could allow a remote attacker to potentially perform out of bounds memory access. This issue is trigger...

CVE-2026-0995

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME...

EUVD-2026-9178

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME...

CVE-2026-20441

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803...

PT-2026-22600

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005574 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID i...

ARM C1-Pro 安全漏洞

The ARM C1-Pro is a high-precision gas detector developed by ARM Corporation. Previous versions of the ARM C1-Pro, such as r1p2-50eac0, had security vulnerabilities. These vulnerabilities stemmed from the fact that the TLBI+DSB component might not be able to ensure proper memory access related to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005414 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is...

CVE-2026-28419

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It allows for reading, converting, and writing images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities. These vulnerabilities stemmed...

CVE-2025-14963

A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver BYOVD was leveraged to gain access to the critical Windows process memory lsass.exe Loc...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the WaveletDenoise process when handling images with small dimensions. An attacker can access sensitive information from adjacent memory by submitting specially crafted image files. Remediation A fix was pushed into...

kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ibregisterdevice" problem Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:408 inline...