CVE-2026-61714

A flaw was found in FluidSynth, a software synthesizer. When the synth.midi-channels configuration is set above 16, the MIDI player can write beyond the allocated memory for tracking active channels. This heap buffer overflow can lead to out-of-bounds memory access, potentially compromising the...

CVE-2026-93989

A flaw was found in vLLM. A remote attacker can exploit a vulnerability by providing malformed input related to 'bad words' token processing. This can lead to out-of-bounds memory access, corrupting the internal data logits memory used for generating responses for other concurrent requests. As a...

github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090042 advisory. A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090110 advisory. In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked int...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-054038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054038 advisory. A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper...

ROS-20260922-73-0096

The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c file of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

Vendor-signed UEFI Shell applications allow Secure Boot bypass

Overview Vendor-signed UEFI Shell applications may allow an attacker to bypass Secure Boot protections by abusing commands such as mm Memory Modify. On systems that trust the affected vendor’s certificate or include the application’s Authenticode hash in the UEFI Authorized Signature Database DB,...

SUSE CVE-2026-90313

In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after cgroupbpfattach failed A potential invalid storage access issue can occur after replacing a cgroup bpf prog. This occurs in the following scenario: 1. prog1 with storage is attached t...

SUSE CVE-2026-90379

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid...

chromium-browser: angle: Out of bounds memory access in ANGLE

An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503392431...

chromium-browser: angle: Out of bounds memory access in ANGLE

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access

A flaw was found in Google Chrome's ANGLE component on Android. A remote attacker could exploit an out-of-bounds memory access vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to...

chromium-browser: angle: Out of bounds memory access in ANGLE

An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499176133...

chromium-browser: angle: Out of bounds memory access in ANGLE

An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=489369089...

chromium-browser: angle: chromium-browser: Out of bounds memory access in ANGLE

An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514482938...

chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia

An out of bounds memory access flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503958940...

chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

TencentOS Server 3: kernel (TSSA-2026:1026)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1026 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: kernel (TSSA-2026:1025)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1025 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...