USN-8426-2: Linux kernel (Azure) vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...

EUVD-2026-37177

In lwisdeviceexternaleventemit of lwisevent.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37186

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

EUVD-2026-37172

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37171

In edgetpusyncfencegroupshutdown of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-42500 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-rocksdb-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-fips, seaweedfs-operator-fips, mattermost-fips...

CVE-2026-46599 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-rocksdb-fips, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs, seaweedfs-fips, seaweedfs-operator-fips, mattermost-fips...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, ansible-operator-fips, crossplane-function-pythonic, openstack-keystone-2025.1, openstack-horizon-2025.1, openstack-placement-2026.1, apache-beam-python-3.11-sdk, superset, awx, mlflow, kubeflow-volumes-web-app, mycli,...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mycli, kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, ggshield, mlflow, superset, in-toto, semgrep, datadog-agent, jupyter-base-notebook, kserve, py3-cassandra-medusa, airflow, kubeflow-volumes-web-app, mitmproxy...

GHSA-H67P-54HQ-RP68 vulnerabilities

Vulnerabilities for packages: sqlpad, ts-patch, saf, vitess, pulumi, py3-jupyterlab, argo-workflows, renovate, tileserver-gl, code-server, kubeflow-katib, langfuse, opensearch-dashboards, thingsboard, lerna, kubeflow-pipelines, eslint, prism, airflow...

CVE-2026-0143

In lwisdeviceexternaleventemit of lwisevent.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0152

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2026-0138

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

MAL-2026-5926 Malicious code in test-copppss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106e028cee7749b7f3a9b327142fc0a402574bc72f3a62d129aa891afe85fe On npm install, the package's preinstall hook node index.js /dev/null 2&1 runs a shell pipeline that collects host identifiers — hostname, pwd, whoam...

USN-8439-1 linux-oracle-5.15 vulnerabilities

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 Shir Tamari and Sagi Tzadik...

CVE-2026-46859

Technical details are not publicly available in the provided documents. Monitor for updates from Oracle and the CVE listing.

CVE-2026-46851

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

CVE-2026-46816

...

CVE-2026-10748

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0...