CVE-2026-19548

Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...

CVE-2026-19548

CVE-2026-19548 concerns multiple use-after-free vulnerabilities in the GNU linker (ld) from the binutils project, triggered in add_archive_element (ld/ldmain.c). The root cause is that plugin_maybe_claim() frees the original BFD when entry->the_bfd->my_archive == NULL, but the caller retain...

CVE-2026-73215

A flaw was found in Coturn. An authenticated client can exploit a vulnerability by sending a specially crafted 'EVEN-PORT Allocate request' with a reservation bit set to zero. This causes the server to incorrectly mark an unused port as taken, leading to the permanent exhaustion of the relay port...

CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...

CVE-2026-63362

A flaw was found in open62541. An unsigned integer underflow in the PubSub signature verification path may allow a remote attacker to cause a denial of service by sending a specially crafted User Datagram Protocol UDP packet. This vulnerability could make the affected system unavailable to...

CVE-2026-19548

Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...

CVE-2026-68429

A flaw was found in the Linux kernel's DisplayPort DP Multi-Stream Transport MST module. A race condition can occur during hotplug or link-loss events when the MST topology is being torn down while the drmdpmsttopologyqueueprobe function is called. This can lead to spurious kernel warnings and...

CVE-2026-68449

A flaw was found in the Linux kernel's satadwc460ex component. A hand-rolled bit-scanning loop in the NCQ tag completion path contains an infinite loop bug. When a specific tagmask value is processed, the loop can overflow, causing an infinite loop in a hard interrupt request hardirq context whil...

CVE-2026-68435

A flaw was found in the Linux kernel, specifically within the LoongArch architecture's kexec command line lookup functionality. A local attacker could exploit this by using the kexecload system call, which incorrectly passes a user-space segment buffer to a kernel function without proper...

CVE-2026-68444

A flaw was found in the Linux kernel's armffa firmware component. A local attacker or malicious process could exploit this vulnerability by providing a NULL argument to the ffapartitioninfoget function. This missing NULL check leads to a NULL pointer dereference, causing a kernel panic and...

CVE-2026-73228

A flaw was found in Django REST framework. A remote attacker could exploit a vulnerability in the request.data parsing mechanism, which bypasses Django's DATAUPLOADMAXMEMORYSIZE protection. This allows an attacker to send oversized JSON and URL-encoded request bodies, leading to excessive...

CVE-2026-68443

A flaw was found in the Linux kernel's gigabytewaterforce hwmon driver. A race condition exists because hidhwstop does not properly stop device I/O. This can occur during a driver probe failure after I/O has been initiated, leading to a Use-After-Free UAF vulnerability. An attacker could...

CVE-2026-68446

A flaw was found in the drm/vmwgfx component of the Linux kernel. This vulnerability arises from insufficient validation of the vmwsurfacemetadata::arraysize field, which is supplied by userspace. An attacker could exploit this by providing a malformed arraysize value, potentially leading to...

CVE-2026-68437

A flaw was found in the Linux kernel's PowerVR DRM driver. The driver incorrectly handles paired fragment jobs, leading to an erroneous check for available space in the command buffer. This issue can cause the system to experience kernel warnings and potentially job timeouts, resulting in a Denia...

CVE-2026-68442

A flaw was found in the btrfs filesystem component of the Linux kernel. When an extent map is split, a flag EXTENTFLAGLOGGING is incorrectly propagated to the new split maps. This issue occurs because the flag clearing operation was applied to the wrong variable during the splitting process...

CVE-2026-68436

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs when the struct dc data structure, which is used for display management, grows beyond a certain memory allocation limit. When this limit is exceeded, the system fails to allocate the necessary memory,...

K000162877: NLnet Labs Unbound vulnerability CVE-2026-44390

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above...

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65941

CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...

CVE-2026-72568

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...