CVE-2026-93222: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites sendsignallocked rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it...

DEBIAN-CVE-2026-93676

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

Signal-iOS v8.29.0.1866

Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...

PT-2026-95403

Name of the Vulnerable Software and Affected Versions xdg-dbus-proxy affected versions not specified Description xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, which allows the bypass of configured path, interface, and member restrictions. This issue enables a sandboxed Flatpak...

python-signal-cli-rest-api (>=22.9.1, <=22.10.6) potentially affected by CVE-2026-85078 via sanic (22.9.0)

sanic PYPI version 22.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api =22.9.1, =22.10.6 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

apthesaurus (22.2.1), ax (0.3.0) +2 more potentially affected by CVE-2026-85078 via sanic (21.12.1)

sanic PYPI version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apthesaurus 22.2.1 - ax 0.3.0 - python-signal-cli-rest-api =22.1.1rc1, =22.1.22.1, =22.2.3 Source cves: CVE-2026-85078 Source advisory:...

signal-cli-dbus-rest-api (>=21.1.5.4, <=21.1.9.1) potentially affected by CVE-2026-85078 via sanic (21.12.0)

sanic PYPI version 21.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - signal-cli-dbus-rest-api =21.1.5.4, =21.1.9.1 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

python-signal-cli-rest-api (22.6.2), sanic-redis-extend (0.0.1) +1 more potentially affected by CVE-2026-85078 via sanic (22.6.0)

sanic PYPI version 22.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api 22.6.2 - sanic-redis-extend 0.0.1 - systembridgebackend =3.3.0.dev5, =3.4.3 Source cves: CVE-2026-85078 Source advisory:...

CVE-2026-89816

In the Linux kernel, the following vulnerability has been resolved: drm: Fix drmcrtccommit leak if signaled when PAGEFLIPEVENT is used Commit 1c6ceeee6ebb "drm/atomic: Fix memleak on ERESTARTSYS during non-blocking commits" fixed a very similar issue when the event was allocated by...

EUVD-2026-80499

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

CVE-2026-83455

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83457

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83456

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83429

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83428

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

EUVD-2026-79756

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83456

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-based attack via HTTP . A low-privileged attacker requires no user interaction and faces low attack complexity to achieve full takeover of the co...

EUVD-2026-79755

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

CVE-2026-83457

CVE-2026-83457 affects the Oracle Demand Signal Repository product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction....

CVE-2026-83455

Oracle Demand Signal Repository (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is vulnerable to an easily exploitable flaw reachable via HTTP by a low-privileged network attacker. Successful exploitation can lead to unauthorized creation, deletion...