CVE-2026-85965: Use After Free

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability...

CVE-2026-109298: Uncontrolled Resource Consumption

Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grepknowledgefiles with short...

CVE-2026-109339: Allocation of Resources Without Limits or Throttling

SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing...

CVE-2026-96266: Stack-based Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 In the Linux...

Important: firefox

Issue Overview: Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-100756 Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR...

Amazon Linux 2023 : rpcbind (ALAS2023-2026-3169)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3169 advisory. A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a...

Microsoft Exchange Server Memory Reclamation Code Execution

The vulnerability of Microsoft Exchange Server’s mail server is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Substance 3D Sampler Buffer Overflow RCE

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2026:1791791753)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791791753 advisory. - libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computi...

Cisco NX-OS Buffer Overflow Info Disclosure

The vulnerability of the Cisco NX-OS operating system is related to operations that occur outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Important: emacs

Issue Overview: A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG Scalable Vector Graphics CSS Cascading Style Sheets data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may...

PT-2026-110960

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description An issue exists in the host firmware configuration parsing. An attacker with authenticated service-level access to the Flexible Service Processor FSP can write special...

CVE-2026-21115: Undefined Security Weakness

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-110929

🚨 CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks...

PT-2026-110802

🚨 CVE-2026-85965 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability. 🎖@cveNotify...

CVE-2026-96265: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory,...

CVE-2026-41510: Protection Mechanism Failure

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal/corazawaf/transaction.go, while internal/bodyprocessors/urlencoded.go writes ARGSPOST without enforcing the cap. The fl...

CVE-2026-21126: Undefined Security Weakness

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-107437: Use of Hard-coded Credentials

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...