GO-2023-1730 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2023-1621 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: policy-controller, ini-file, azure-workload-identity-webhook, wazero, temporal-ui-server, golangci-lint, postgres-operator, nri-rabbitmq, gostatsd, metacontroller, dockerize, chart-testing, sbomqs, custom-pod-autoscaler, hubble-ui, mesosphere-vsphere-csi,...

CVE-2026-64256 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-86RP-M36J-7R28 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-298C-3CXP-3C2H vulnerabilities

Vulnerabilities for packages: linux-gcp...

MINI-7542-WP76-8R9F

Bulletin has no description...

...[ More ]

A proof of concept exploit for an out-of-bounds memory access vulnerability in the QEMU Hyper-V synthetic debugger device. The handlerecvmsg function fails to verify the length returned by cpuphysicalmemorymap before copying a received debug datagram into the mapped region. A guest able to invoke...

SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3602-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3602-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: -...

GHSA-HF6X-8P5F-CGMF vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, jmeter, apache-nifi, camunda-zeebe, airbyte-platform-fips, conductor-fips, nuxeo, wazuh-indexer, conductor, nrjmx, airbyte-platform, jbang, apicurio-registry-fips, sonarqube, kserve-modelmesh, apache-hop, druid, traccar, zipkin, traccar-fips,...

MINI-X6XG-96WG-HWQ6

Bulletin has no description...

CVE-2026-72642

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

EUVD-2026-58287

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

SUSE CVE-2026-68401

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix out-of-bound writes in ffasetupandtransmit Sashiko locally reports multiple out-of-bound issues in ffasetupandtransmit: 1 Writing epmemaccess-reserved can write out of bounds for FFA versions 1.2 as...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...

UBUNTU-CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

MINI-9FPH-3QG3-8HRR

Bulletin has no description...

MINI-HJ77-VPC8-JCQW

Bulletin has no description...

glib2: Fix of CVE-2025-13601

CVE-2025-13601: error out instead of overflowing the allocation in gescapeuristring when a string needs a very large number of percent-escapes, and count unacceptable characters in an unsigned type...

K000162906: Linux kernel vulnerabilities CVE-2025-39981, CVE-2025-39982, CVE-2025-39983

Security Advisory Description CVE-2025-39981 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmtpending being freed while still being processed like in the following trace, in order to fix...