PT-2026-89284

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...

Cortex XDR Broker VM: Privilege Escalation Vulnerability

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM. Work around: No known workarounds exist for this issue...

CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

CVE-2026-86083 n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace...

CVE-2026-86083

n8n , an open-source workflow automation platform, is affected by a sandbox escape in its legacy expression engine. The root cause is that the engine called the mutable global JSON.stringify while generating source text for synthetic string literals and timezone interpolation. A crafted expressio...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-45197

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

EUVD-2026-70858

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197: Time-of-check Time-of-use (TOCTOU) Race Condition

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

PT-2026-85372

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

SUSE CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

...

kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access

A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...

PT-2026-84927

In the Linux kernel, the following vulnerability has been resolved: mm/huge memory: initialise workingset state before folio split xas try split adds GFP ACCOUNT for page-cache xa nodes, but folio split leaves the xa state's xa lru unset. That lets a live, memcg-charged xa node exist without bein...

The vulnerability of the nested_vmcb02_prepare_control() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...