CVE-2026-57454

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads th...

CVE-2026-42388

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

CVE-2026-53275

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query, a pointer to the multicast group address is retrieved when initially parsing the packet. This pointer is later dereferenced without being...

CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

CVE-2026-53237

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspend/resume mvebupwmsuspend and mvebupwmresume are called for all GPIO banks during suspend/resume, but not all banks have PWM functionality. GPIO banks without PWM have mvchip-mvpw...

CVE-2026-53216

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buffer mvpp2 has short and long BM pools, and short pool buffers can be smaller than PAGESIZE. The XDP path nevertheless initializes every xdpbuff with PAGESIZE as frame size. XDP helper...

CVE-2026-53200

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN0 when !FEATXNX XN has already been extracted from its bitfield position so using FIELDPREP on the mask that clears XN0 is completely broken, having the effect of unconditionally granting execute...

CVE-2026-53131

In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using ethhdr ip6teui64, xtmac, the bitmap:ip,mac, hash:ip,mac, and hash:mac ipset types, and nflogsyslog access ethhdrskb after either assuming that the skb is associated with an...

SUSE CVE-2026-53614

unknown...

CVE-2026-55388 vulnerabilities

Vulnerabilities for packages: kibana, kubeflow-katib, drupal...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, pinot-fips, wazuh-indexer, kafka-fips, seata, ruby4.0-jrjackson, elasticsearch-fips, geoserver, management-api-for-apache-cassandra-5.0, apache-hop, ruby3.3-jrjackson, confluent-kafka, zipkin, spark-kubernetes-operator-fips,...

CVE-2026-54512 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-tika, trino, kafka, nextflow, zipkin, dependency-track, infinispan, wavefront-proxy, thingsboard, ruby4.0-jrjackson, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, apache-pulsar, airflow, ruby3.3-jrjackson, gradle, logstash,...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-tika, trino, kafka, nextflow, zipkin, dependency-track, infinispan, wavefront-proxy, thingsboard, ruby4.0-jrjackson, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, apache-pulsar, airflow, ruby3.3-jrjackson, gradle, logstash,...

CVE-2026-2050

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

GHSA-WXXX-GVQV-XP7P vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-52970

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: fix missing expect put in obj eval nftctexpectobjeval allocates an expectation and may call nfctexpectrelated, but never drops its local reference. Add nfctexpectputexp before return to balance allocation...

GHSA-78JW-WW3G-9WP7 vulnerabilities

Vulnerabilities for packages: nginx-stable, ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-52922

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadvdatforwarddata calls pskbcopyforclone to duplicate an skb for each DHT candidate, but does not check the return value before passing it to batadvsendskbprepareunicast4addr...

Astra Linux – Vulnerability in Chromium

The use of after-free in CSS in Google Chrome before version 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...