Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows DHCP Client Denial of Service Vulnerability

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

.NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

JLSEC-2026-1243 A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in...

A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...

JLSEC-2026-1244 A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the...

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...

JLSEC-2026-1246 A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the...

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

JLSEC-2026-1245 A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used...

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

JLSEC-2026-1247 A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list...

A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundar...

CVE-2026-68165

A flaw was found in the Linux kernel's Data Access MONitor DAMON core logic. A local user could exploit this by providing invalid, zero-length memory region ranges through DAMON's application programming interface API callers. This improper input validation can lead to a divide-by-zero error,...

CVE-2026-68297

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A local user can exploit this vulnerability by providing a crafted Maximum Transmission Unit MTU value that exceeds the expected limit. This can lead to a division-by-zero error, causing a system crash and...

CVE-2026-68173

A flaw was found in the ublk component of the Linux kernel. This vulnerability occurs when the ublk server sends an ENDUSERRECOVERY command without a successful STARTUSERRECOVERY. This can cause I/O requests to become stranded, leading to subsequent file system synchronization operations fsync to...

CVE-2026-68095

A flaw was found in fuse-uring in the Linux kernel. A race condition exists between the registration of an I/O operation and the abortion of a FUSE connection. This can be triggered by a local attacker or a malicious application. This flaw can cause the unmount thread to hang indefinitely, leadin...

CVE-2026-68370

A flaw was found in the Linux kernel's USB gadget dummy Host Controller Driver HCD. A race condition can occur when a shared USB request object fiforeq is prematurely reused before its completion callback has finished. This can lead to the overwriting of the callback pointer, causing a general...

CVE-2026-68340

A flaw was found in the Linux kernel's hwmon OCC OpenPOWER Abbreviated Command and Control poll response parser. This vulnerability occurs because the parser incorrectly uses a static array capacity as the boundary for sensor data blocks instead of the actual data length. A specially crafted,...

CVE-2026-68302

A flaw was found in the Linux kernel's Adjacency Management Protocol AMT implementation. Several AMT receive and transmit paths improperly cache pointers to socket buffer skb headers. When a helper function reallocates the skb head, these cached pointers become invalid, leading to a use-after-fre...

CVE-2026-68427

A flaw was found in the gpu: host1x component of the Linux kernel. The host1xbounpin function incorrectly dereferences a memory mapping after it has been freed, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause memory corruption, potentially leading to a...

CVE-2026-68186

A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged user can exploit this by registering a binfmtmisc entry with a specially crafted interpreter path on a FUSE Filesystem in Userspace mount. If the interpreter open fails, it can lead to a NULL pointer dereference whe...

CVE-2026-68123

A flaw was found in the Open vSwitch component of the Linux kernel. This vulnerability arises from an underflow condition when handling Generic Segmentation Offload GSO packets in userspace. A length calculation error can lead to a buffer underflow when data is processed by the skbzerocopy...