CVE-2026-89092: Memory Allocation with Excessive Size Value

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-73786 Unauthenticated Network-Based Denial of Service in CPPM systems

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...

CVE-2026-73786

CVE-2026-73786 is an unauthenticated Denial-of-Service vulnerability in the web-based management interface of HPE CPPM (Change and Patch Management). A remote attacker with network access can exploit the flaw without credentials to cause instability and degraded performance on the CPPM server. Th...

EUVD-2026-75123

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service DoS attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server...

CVE-2026-87822

t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance fr...

CVE-2026-87822

t-digest versions 3.1 through 3.3 contain a denial-of-service vulnerability in MergingDigest.fromBytes . During deserialization, centroid means are not validated, allowing an attacker to inject NaN values that bypass existing checks. When such a malformed digest is merged, sorting performance deg...

SUSE-SU-2026:4109-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...

CVE-2026-69324

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...

EUVD-2026-73455

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

Windows Performance Monitor Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

EUVD-2026-72689

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the loadmon module's stop path where exitandcleanup deletes the LoadMon object and frees the performance counter before perfend attempts to access it. Attackers can trigger this vulnerability by issuing the loadmon stop comma...

PT-2026-87368

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

CVE-2026-69324: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2025-52657

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

CVE-2025-52657 HCL MyXalytics is affected by multiple security vulnerabilities.

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

EUVD-2025-210861

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

PT-2026-86672

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

CVE-2026-19224

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

EUVD-2026-70902

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...