CVE-2026-64728

A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy...

GO-2026-6189 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2021-37137 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-37136 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: logstash-fips, druid, conductor, nuxeo, conductor-fips, zipkin, cassandra-reaper, logstash, thingsboard...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: logstash-fips, traccar, druid, conductor, nuxeo, conductor-fips, traccar-fips, zipkin, cassandra-reaper, logstash, thingsboard...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: logstash, zipkin, cassandra-reaper, druid, thingsboard...

CVE-2026-72462

A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peerpath. This allows for a race with unixreleasesock due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-72462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to...

GHSA-H7RQ-F9GQ-MC8R vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...

CVE-2026-72462

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with...

UBUNTU-CVE-2026-72462

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with...

CVE-2026-72462

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with...

CVE-2026-74439

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry devicepasidtableteardown zeroes the 128-bit scalable-mode context entry with contextclearentry while the Present bit is still set. This creates a windo...

CVE-2026-74438

In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...

CVE-2026-74436

In the Linux kernel, the following vulnerability has been resolved: rxrpc: serialize kernel accept preallocation with socket teardown rxrpckernelchargeaccept reads rx-backlog without any socket/backlog synchronization and passes that raw pointer into rxrpcservicepreallocone. A concurrent...

CVE-2026-74434

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Don't move a peeked OOB message onto the pending queue rxrpcrecvmsgoob takes a received oob message off recvmsgoobq and, if a response is needed, moves it onto the pendingoobq tree. However, only the unlink from recvmsgoob...

CVE-2026-74432

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsgMSGPEEK Fix rxrpcrecvmsg to also drop the ref it holds on an already-released call if MSGPEEK is in force the function holds a ref on the call irrespective of whether MSGPEEK is specifie...