com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.10), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.10) +5 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.10.0, <=24.10.10)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.3 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.15), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.15) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.5.0, <=24.7.15)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.15 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-107588 Source...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.22), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.22) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.8.0, <=24.9.22)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.8 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58079)

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...

PT-2026-116359

Name of the Vulnerable Software and Affected Versions Themify Popup versions prior to 1.4.8 Description The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient input sanitization and output...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: populate ndochangemtu to prevent buffer overflow Sending a PFPACKET allows bypassing the CAN framework logic and directly reaching the xmit function of a CAN driver. The only check performed by the PFPACKET framewor...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: Platform: MediTech: VPU: Fix for NULL pointer dereferencing If pdev is NULL, it is still dereferenced. This fixes the “match warning” in the following file: drivers/media/platform/mediatek/vpu/mtkvpu.c:570 – vpuloadfirmwar...

Astra Linux – vulnerability in Chromium

Prior to version 150.0.7871.47, using “After Free” in GPUs within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86/pmu: Disabled support for adaptive PEBS. Support for virtualizing adaptive PEBS has been discontinued. This is because KVM’s implementation is architecturally broken without an obvious or easy way to address this issu...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: intelth: msu: Fix for vmalloced buffers After committing the change f5ff79fddf0e “dma-mapping: remove CONFIGDMAREMAP”, there is a possibility that DMA buffers may be allocated using vmalloc, which can affect the MMAP mapping code...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fixed a kernel panic that occurs when the host sends an invalid H2C PDU length. If the host sends an H2CData command with an invalid DATAL value, the kernel may crash in the nvmettcpbuildpduiovec function. The...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.107, using free memory in GPUs with Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fixed the issue of information leakage due to DMAFROMDEVICE. The problem I’m addressing was discovered during the LTP test covering cve-2018-1000204. A brief description of what happens is as follows: 1 The test case sen...

Astra Linux – Vulnerability in libmodbus

It was discovered that libmodbus v3.1.6 contains a use-after-free issue related to the ctx-backend pointer. This vulnerability allows attackers to trigger a Denial of Service DoS attack by sending a crafted message to the unit-test-server...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Added handling of TMF in tmrlist. An abort that is responded to by iSCSI itself is added to tmrlist, but it does not go to the target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

Astra Linux – Vulnerability in libmodbus

An invalid pointer in the modbusreceive function of libmodbus v3.1.6 allows attackers to cause a Denial of Service DoS by sending a crafted message to the unit-test-server...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: fix UBSAN shift-out-of-bounds issue When value timeunit, the parameter of ilog2 will be zero and the return value is -1. u64-1 is too large for shift exponent and then will trigger shift-out-of-bounds: shift...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in iprtupdatepmtu iprtupdatepmtu must use RCU protection to ensure that the network structure it reads does not disappear...