CVE-2026-112272

A flaw was found in libdisplay-info. A local attacker can cause a Denial of Service DoS by providing specially crafted Extended Display Identification Data EDID through a malicious display, video capture device, or file. The DisplayID parser fails to properly validate data block lengths, allowing...

CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

CVE-2026-12669

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-11831

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

GHSA-PCC4-RVHR-2PR8 Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

CVE-2026-11831 IBM MQ Heap-based Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

EUVD-2026-104471

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-11831

IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) occurring during the processing of a specially crafted client request. An authenticated attacker can leverage this out-of-bounds read to cause a limited denial of service and gain very limited information regarding the process memory ...

CVE-2026-11831 IBM MQ Heap-based Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request...

CVE-2026-12669 IBM MQ Out-of-bounds Read

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

EUVD-2026-104464

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-12669

IBM MQ and IBM MQ Operator are affected by an out-of-bounds read vulnerability. An authenticated attacker can trigger this minor error by sending malformed compressed data . While the request is ultimately rejected, the underlying cause is a buffer error during data processing. The affected IBM M...

CVE-2026-12669 IBM MQ Out-of-bounds Read

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected...

CVE-2026-107187 Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables

A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations ma...

CVE-2026-107187

The Eptura Archibus platform is vulnerable to an unauthenticated database read via the AbCommonResources-getDataRecords workflow rule. An attacker can chain this with an authentication bypass in the isPasswordUppercase method to execute DWR requests without valid credentials. This allows unauthor...

CLSA-2026-1786761805 kernel: Fix of 46 CVEs

wifi: ath11k: update channel list in reg notifier instead reg worker CVE-2025-23133 - wifi: cfg80211: call regnotifier for self managed wiphy from driver hint CVE-2025-23133 - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception CVE-2025-37957 - KVM: x86: forcibly leave nested mode on vCPU...

CVE-2026-109431

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in CacheStorage, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from out-of-bounds read accesses in the Offline component, which could allow remote attackers to read memory within the sandbox through a specially crafted HTML page...