CVE-2026-64574

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When new Wi-Fi links are added, an error in the update process can cause debugfs entries to point to memory that has already been freed. A local attacker can exploit this use-after-free vulnerability by accessing these dangling...

CVE-2026-64569

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS subsystem. An unprivileged local user could send a specially crafted network message, leading to a null pointer dereference. This vulnerability could cause a system crash, resulting in a denial of service...

CVE-2026-64579

A flaw was found in the Linux kernel's xfrm policy component. An issue in the xfrmhashrebuild function, specifically with the preallocation of inexact policy bins, can lead to memory allocation failures under memory pressure. This failure can corrupt internal data structures, allowing a local...

CVE-2026-44950

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

EUVD-2026-53843

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-55980

CVE-2026-55980 is a DoS vulnerability in CatchPulse. The available documents indicate a stack buffer overrun as the root cause leading to a denial-of-service condition. Affected software is CatchPulse; details on exact versions, components, or exploit vectors are not provided in the documents. Th...

CVE-2026-55980 Denial-of-service vulnerability in CatchPulse

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-55980

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-4427

No description is available for this CVE...

DEBIAN-CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

CVE-2025-14779

The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...

UBUNTU-CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 security and extras update

Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

CVE-2025-13909

WSO2 Identity Server is reported to have a multi-tenant authentication flaw where requests using Email OTP, SMS OTP, or Magic Link as first factors do not adequately enforce tenant isolation. This can allow an attacker to disclose PII from other tenants (e.g., mobile numbers) due to cross-tenant ...

CVE-2026-18649 Gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

CVE-2026-18649

CVE-2026-18649 affects the GStreamer project, specifically the gst-plugins-good package. The vulnerable components are the rtph264depay and rtph265depay RTP depayloaders, which fail to enforce a maximum size on the reassembly buffer during fragmented RTP packet processing. The root cause is unbou...