CVE-2026-98247

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing responses for supported codecs, the parser fails to verify that adequate buffer space remains before reading the vendor codec count. A malicious or malfunctioning Bluetooth controller can supply a truncated response packe...

CVE-2026-98292

A flaw was found in the Linux kernel's MediaTek Bluetooth drivers. The drivers fail to properly validate the length of incoming Wireless Management Task WMT event packets before accessing their data fields. A malicious or compromised device could transmit a truncated or malformed event, causing a...

CVE-2026-98384

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing socket destruction requests through the bpfsockdestroy helper, the kernel fails to properly verify if a socket is a full socket before attempting to read its protocol field, causing an out-of-bounds memor...

CVE-2026-98382

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS by triggering an out-of-bounds memory read. When handling device-bound programs, improper validation allows a program intended for one...

CVE-2026-98375

A flaw was found in the Linux kernel's Xen network frontend driver. This vulnerability allows a malicious host backend to cause a Denial of Service DoS by transmitting incoming network packets with an incomplete Ethernet header. Because the driver fails to verify that incoming packet buffers meet...

CVE-2026-98348

A flaw was found in the Linux kernel's libipw wireless driver. An attacker within Wi-Fi range can exploit this flaw by transmitting a malformed, abnormally short association response frame. Due to an improper packet length calculation, the driver performs an out-of-bounds memory read, which can...

CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2026-98221

A flaw was found in the Linux kernel's trusted keys subsystem. A local user can exploit this vulnerability by submitting a specially crafted trusted key payload. Because the kernel validates boundaries against the encoded data length rather than the decoded buffer size, an out-of-bounds memory re...

CVE-2026-107634

A flaw was found in dislocker. An attacker can exploit this issue by providing a specially crafted BitLocker volume image containing inflated metadata sizes. When the application opens or mounts the image, it fails to properly validate these boundaries, triggering an out-of-bounds memory read. Th...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98187

A flaw was found in the Linux kernel's p54 Wi-Fi driver. The driver fails to verify that an entire interface record fits within the buffer boundaries when parsing EEPROM Electrically Erasable Programmable Read-Only Memory data. An attacker capable of attaching a crafted wireless device or supplyi...

CVE-2026-98193

A flaw was found in the Linux kernel's libipw wireless driver. When processing Temporal Key Integrity Protocol TKIP network frames, the driver assumes the frame contains a complete Message Integrity Check MIC without verifying that the packet meets the minimum expected length. An attacker within...

EUVD-2026-94978

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

CVE-2026-98363

A flaw was found in the Linux kernel's ARM System Control and Power Interface SCPI driver. The driver fails to validate the upper bound of operating performance points returned by system firmware during power management configuration. A compromised or malicious firmware environment could return a...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because unauthenticated HTTP endpoints process specific URL query parameters without performing numerical range checks or validating array index boundaries ...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

EUVD-2026-94667

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...