PT-2026-94859

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack over-read exists in the debug output helpers of the host1x GPU driver. The functions host1x debug output and host1x debug cont utilize vsnprintf, which returns the total length t...

CVE-2026-90416: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in ccparams debugfs getparam reads a congestion parameter as a u32 but formats it with the signed "%d" into an 11-byte stack buffer. A value with bit 31 set, such as 0x80000000, renders as...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3800)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow...

CVE-2026-81480: Stack-based Buffer Overflow

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-90416: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in ccparams debugfs getparam reads a congestion parameter as a u32 but formats it with the signed "%d" into an 11-byte stack buffer. A value with bit 31 set, such as 0x80000000, renders as...

PT-2026-94417

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto acomp component where ACOMP REQUEST ON STACK reserves insufficient storage for asynchronous fallbacks. When an async implementation is selected, the acomp...

CVE-2026-92936: Generation of Error Message Containing Sensitive Information

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError for example by calling eval with malformed source and then read the error's .stack...

CVE-2026-90358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btfdistillfuncproto accepts a function argument up to 16 bytes, so a 128-bit scalar such as int128 reaches the x86 trampoline with argsize == 16. But the current...

PT-2026-94648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the bpf get task stack function fails to initialize the buf buffer on all return paths. This affects the bpf get task stack and bpf get task sta...

PT-2026-94418

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The st33zp24 status function fails to verify the result of the transport read operation. In scenarios where the I2C transport skips i2c master recv due to a short or failed register-sele...

CVE-2026-90358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btfdistillfuncproto accepts a function argument up to 16 bytes, so a 128-bit scalar such as int128 reaches the x86 trampoline with argsize == 16. But the current...

CVE-2026-93119: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: ljca: bound banknum in ljcaenumerategpio ljcaenumerategpio reads desc-banknum from the device and loops validpini = getunalignedle32... for i banknum. validpin holds only LJCAMAXGPIONUM / 32 = 2 entries. Two checks run befor...

CVE-2026-93372: Stack-based Buffer Overflow

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93061: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Avoid stack over-read in debug output helpers host1xdebugoutput and host1xdebugcont used vsnprintf, which returns the length the formatted string would have reached with an unbounded buffer. That return value was...

RHEL 10 : rrdtool (RHSA-2026:68702)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:68702 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3825)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow...

CVE-2026-81546: Stack-based Buffer Overflow

The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...

PT-2026-94986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cros typec register partner pdos function where partner Power Delivery Objects PDOs are copied from the EC TYPEC STATUS response into a fixed-size array caps...

PT-2026-94305

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.8 Description NodeVM exposes the host util module to the sandbox as an unfiltered shallow copy in defaultBuiltinLoaderUtil, and the deprecated sys builtin is exposed through the generic builtin loader. When running o...

CVE-2026-19477: Stack-based Buffer Overflow

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...