CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

The vulnerability of the btrfs_sync_file() function in the include/trace/events/btrfs.h module of the Linux kernel allows a malicious actor to access protected information or cause service failures.

The vulnerability of the btrfssyncfile function in the include/trace/events/btrfs.h module of the Linux kernel stem from improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to the failure to release resources after their useful life has expired, allows a perpetrator to cause service failures.

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the block/null_blk/main.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the block/nullblk/main.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the fs/nfs/file.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/nfs/file.c component of the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the thermal_of.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the thermalof.c component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the function dw_i3c_master_i2c_xfers() in the Linux kernel’s dw-i3c-master.c component allows a hacker to cause a service failure.

The vulnerability of the dwi3cmasteri2cxfers function in the dw-i3c-master.c component of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mprls0025pa_spi.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mprls0025paspi.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 8 : resource-agents (RHSA-2026:58834)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58834 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

RHEL 8 : resource-agents (RHSA-2026:58820)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58820 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

The vulnerability of the drivers/misc/uacce/uacce.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/misc/uacce/uacce.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/dma/fsl-edma-main.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/dma/fsl-edma-main.c component of the Linux operating system is related to the unlocking of a resource that was not locked in the first place. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the XML component in the Firefox web browser allows a hacker to trigger a service failure.

The vulnerability of the XML component in the Firefox web browser is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the driver/media/pci/intel/ipu6/ipu6.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/pci/intel/ipu6/ipu6.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the drivers/media/platform/chips-media/wave5/wave5-vpu.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/platform/chips-media/wave5/wave5-vpu.c component in Linux kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

RHEL 8 : resource-agents (RHSA-2026:58811)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58811 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

AlmaLinux 10 : java-25-openjdk (ALSA-2026:55798)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55798 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Improve font loading CVE-2026-70906 JDK: Enhance TLS...