CVE-2026-19571: Concurrent Execution using Shared Resource with Improper Synchronization

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

CVE-2026-96394: Buffer Over-read

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-98384: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98382: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

ROS-20261009-73-0504

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-19575: Access of Resource Using Incompatible Type

The user-mode verification handler for the devicedeinit system call, zvrfydevicedeinit in kernel/device.c, validated its dev argument with KSYSCALLOBJINITdev, KOBJANY. kobjectvalidate short-circuits its type comparison when the requested type is KOBJANY, so the check reduced to "this pointer is t...

CVE-2026-7826: Out-of-bounds Read

A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...

PT-2026-108761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xen/netfront component where the handle incoming queue function fails to verify if the length of the first RX slot, defined by the pull to variable, is at least as...

CVE-2026-75345

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...

EUVD-2026-95903

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...

SUSE SLED15 / SLES15 Security Update : libXtst (SUSE-SU-2026:4566-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4566-1 advisory. This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parse...

PT-2026-108958

Name of the Vulnerable Software and Affected Versions MOVO versions prior to 0.2.4 Description An authorization bypass exists in the chat-api document endpoints. Authenticated users can access stored objects belonging to other users by providing arbitrary object paths. By sending a known target...

CVE-2026-75351

OpENer v2.3/commit 76b95cf is susceptible to an out-of-bounds read vulnerability located in the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending a specially crafted connection request, which may trigger an application crash and result...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ROS-20261009-73-0366

The vulnerability of the x86/kexec components of the Linux operating system’s kernel is related to reading data from beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-108102: Out-of-bounds Read

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsevolumemeasurement in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags...

CVE-2026-107837: Out-of-bounds Read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

AlmaLinux 9.2 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.2:CLSA-2026:1791564868)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791564868 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

AlmaLinux 8 : tftp (ALSA-2026:78952)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:78952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fr...