Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Removed unnecessary locks from usbtvvideofree. The lock-related code in usbtvvideofree is now removed because it is unnecessary and may lead to a deadlock, as reported here:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are correctly configured, and the MIDIStreaming endpoint descriptors contain the correct information, the values of bNumEmbMIDIJack and bLength are se...

CVE-2026-103930

A flaw was found in cpp-httplib. The library is vulnerable to HTTP request splitting due to improper encoding of carriage-return and line-feed characters within streaming request paths. If an application forwards untrusted user input to the streaming client interface, a remote attacker can supply...

CLEANSTART-2026-AW40978 frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

Security vulnerability affects the temporal-server-fips package. The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor...

PT-2026-122693

Security vulnerability affects the temporal-server-fips package. The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor...

CVE-2026-102180 Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...

EUVD-2026-101396

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...

CVE-2026-102180

A Stack-based Buffer Overflow vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An attacker with access to a configured BGP peering session can trigger a denial of service by sending a crafted BGP route attribute. This occurs specificall...

CVE-2026-107421

Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2...

CVE-2026-107421 WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability

Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2...

CVE-2026-107421

The VideoWhisper.com Broadcast Live Video (videowhisper-live-streaming-integration) WordPress plugin, versions up to and including 7.3.2 , is susceptible to a Session Fixation vulnerability (CWE-384). This flaw allows an attacker to perform Session Hijacking , potentially gaining unauthorized acc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-server (UTSA-2026-130059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130059 advisory. RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol authentication can allow a...

CVE-2026-69970

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69963

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69966

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69964

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69966

An integer overflow or wraparound vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege escalation . A formal official fix is available, and the vulnerability is...

CVE-2026-69964

A Use after free vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS v3.1 score indic...

CVE-2026-69970

A heap-based buffer overflow exists in the Microsoft Streaming Service (specifically identified in some documents as the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation...