CVE-2026-90358

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter x86 trampoline. When processing 128-bit arguments, the system incorrectly calculates the required stack size for saving registers. This under-allocation leads to memory corruption by overwriting adjacent stack slots. A local attack...

CVE-2026-90357

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...

CVE-2026-43849

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

CVE-2026-98473

A flaw was found in the Linux kernel's s390 Virtual Function I/O Adjunct Processor VFIO-AP device driver. A local user with administrative privileges can trigger this issue by removing an AP queue from the host configuration while it remains assigned to an active virtual machine. Because the driv...

net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing

A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...

CVE-2026-98472

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD SEV Secure Encrypted Virtualization implementation. This flaw allows a local user with permissions to manage virtual machines to cause a denial of service DoS through memory exhaustion. When an SEV guest is destroyed afte...

CVE-2026-43849

Technical details regarding the specific affected software, component, or version are not publicly available in the provided documents. The description only confirms a heap memory read vulnerability that could allow an attacker to exfiltrate sensitive data. Monitor for further updates.

EUVD-2026-104850

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

CVE-2026-43849

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...

ROOT-APP-GOBINARY-GHSA-HRXH-6V49-42GF GHSA-hrxh-6v49-42gf in google.golang.org/grpc - Patched by Root

Root has patched GHSA-hrxh-6v49-42gf in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

Exploit for CVE-2026-99999

CVE-2026-99999 — Technical Analysis & Attack Chain Study Li...

CVE-2026-98749

A flaw was found in the MAX3100 serial driver in the Linux kernel. This flaw allows a local privileged user to cause a Denial of Service DoS or memory corruption by unbinding the device during a system suspend cycle. In this scenario, the driver releases the device port memory while an active...

CVE-2026-98662

A flaw was found in the Linux kernel's gp2ap020a00f ambient light sensor driver. During device removal or initialization failure, the driver fails to properly drain scheduled interrupt tasks before releasing memory structures. A local user capable of unbinding or disconnecting the device can...

CVE-2026-98801

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS or kernel memory corruption by manipulating socket memory reservation settings. Due to a lack of upper-bound validation and missing locking mechanisms when applied to User Datagram Protocol UDP sockets, integer...

CVE-2026-98475

A flaw was found in the Linux kernel's s390 Channel Measurement Facility CMF. This vulnerability can allow a local user to cause memory corruption or a Denial of Service DoS due to confusion between virtual and physical memory addresses. When extended format channel measurement data is recorded o...

Exploit for CVE-2026-99999

CVE-2026-99999 Scanner English | 한국어 A s...

Decompression Bomb

Apache CXF is vulnerable to a decompression bomb. The vulnerability is due to CompressionUtils.inflate decompressing attacker-controlled DEFLATE data without an output-size limit, where a small KB crafted payload can expand to gigabytes on the heap and attackers can trigger it via JWE decryption...

CVE-2026-93117

A flaw was found in the Linux kernel's USB subsystem. This use-after-free UAF vulnerability occurs when a dynamic ID is removed concurrently while the usbprobeinterface function is still using it. A local attacker could potentially exploit this timing issue, leading to memory corruption and...

CVE-2026-98599

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker can exploit this flaw to cause kernel memory corruption and potentially achieve privilege escalation or a denial of service system crash. This vulnerability occurs because the verifier fails to reject...

CVE-2026-98596

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition during network device unregistration can lead to improper reference counting of uncached routes. A local attacker could exploit this flaw to cause an internal resource leak, leading to memory exhaustion and a Denia...