EUVD-2026-37186

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

EUVD-2026-37172

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37171

In edgetpusyncfencegroupshutdown of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-42500 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-fips, seaweedfs-rocksdb-fips, mattermost-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-operator-fips...

CVE-2026-46599 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-fips, seaweedfs-rocksdb-fips, mattermost-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-operator-fips...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: crossplane-function-pythonic, barman, airflow-core, mitmproxy, jupyter-base-notebook, localstack, ansible-operator, litellm, openstack-horizon-2025.1, openstack-tempest-2026.1, apache-beam-python-3.11-sdk, ggshield, wazuh-manager, datadog-agent, py3-cassandra-medusa,...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: mitmproxy, kserve, datadog-agent, ggshield, in-toto, jupyter-base-notebook, kubeflow-jupyter-web-app, mycli, py3-cassandra-medusa, superset, kubeflow-pipelines-visualization-server, k8s-sidecar, mlflow, semgrep, dask-kubernetes, airflow, kubeflow-volumes-web-app...

GHSA-H67P-54HQ-RP68 vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, py3-jupyterlab, langfuse, code-server, kubeflow-katib, lerna, ts-patch, sqlpad, eslint, prism, airflow, opensearch-dashboards, kubeflow-pipelines, thingsboard, pulumi, argo-workflows, saf, renovate...

CVE-2026-0143

In lwisdeviceexternaleventemit of lwisevent.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0152

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2026-0138

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

MAL-2026-5926 Malicious code in test-copppss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106e028cee7749b7f3a9b327142fc0a402574bc72f3a62d129aa891afe85fe On npm install, the package's preinstall hook node index.js /dev/null 2&1 runs a shell pipeline that collects host identifiers — hostname, pwd, whoam...

USN-8439-1 linux-oracle-5.15 vulnerabilities

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 Shir Tamari and Sagi Tzadik...

CVE-2026-46859

Technical details are not publicly available in the provided documents. Monitor for updates from Oracle and the CVE listing.

CVE-2026-46851

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-46816

...

CVE-2026-10748

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0...

CVE-2026-0152

CVE-2026-0152 affects the OSMMapPMRGeneric path in pmr_os.c. A logic error may allow abusing a system-call sequence to expand the VMA out of bounds, enabling local privilege escalation with no extra privileges or user interaction required. Documented impact is high for confidentiality, integrity,...

CVE-2026-0152

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...