chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500172224...

chromium-browser: angle: Out of bounds read and write in ANGLE

An out of bounds read and write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511719039...

EUVD-2026-90370

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

CVE-2026-102098 Kiteworks Core SQL Injection

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

CVE-2026-102098 Kiteworks Core SQL Injection

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

CLEANSTART-2026-LI38180 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

Security vulnerability affects the containerd package. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop...

FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...

CVE-2026-55224

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

OPENSUSE-SU-2026:21982-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. -...

CVE-2026-47595

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer fails to properly preserve memory permissions, allowing an unprivileged local user to write data to read-only memory. A local attacker could exploit this vulnerability to execute arbitrary code, escalate privileges,...

CVE-2026-47596

A flaw was found in the NVIDIA GPU Display Driver for Linux. In the kernel mode layer, memory permissions are not properly preserved, allowing an unprivileged local user to write to read-only memory. This issue can lead to arbitrary code execution and privilege escalation on the affected system...

CVE-2026-47545

A flaw was found in the NVIDIA GPU Display Driver. A local user with basic privileges can exploit an out-of-bounds read vulnerability in the driver's kernel-mode layer. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges, access or tamper with sensitiv...

CVE-2026-55224

The MineAdmin backend management system is vulnerable to a path traversal flaw in its app-store plugin service prior to version 3.2.0-alpha.2 . The application fails to sanitize the user-supplied identifier parameter, concatenating it directly into filesystem paths within plugin/mine-admin/app-st...

CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

EUVD-2026-90209

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

Exploit for CVE-2026-76570

CVE-2026-76570 — JCTables comjctables unauthenticated SQL r...

CVE-2026-46711

Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...

CVE-2026-47527

A flaw was found in the NVIDIA GPU display driver. An authenticated local attacker with high privileges can trigger an out-of-bounds read vulnerability in the device firmware. Successful exploitation may lead to arbitrary code execution, denial of service DoS, privilege escalation, or unauthorize...

CVE-2026-47524

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger an out-of-bounds read in the kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or information disclosure...

CVE-2026-47515

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an unbounded string operation within the kernel mode layer, causing an out-of-bounds memory read. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges,...