SUSE CVE-2026-89266

stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...

SUSE CVE-2026-89579

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

SUSE CVE-2026-90616

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

Chromium CVE-2026-87638: Out of bounds write in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87621: Out of bounds write in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-78209

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution...

CVE-2026-91958: Out-of-bounds Read

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2026-58701: Concurrent Execution using Shared Resource with Improper Synchronization

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92330

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write can occur in the Start function of AudioRtpPayloadEncoderNode.cpp due to improper input validation. This issue may allow remote code...

PT-2026-92280

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description An out-of-bounds write occurs due to a missing bounds check. This flaw allows remote code execution without requiring additional execution privileges or user interaction. Recommendatio...

CVE-2026-0159: Out-of-bounds Write

In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in multiple functions within remap.c allows for a possible out-of-bounds write. This condition could enable local escalation of...

CVE-2026-58734: Concurrent Execution using Shared Resource with Improper Synchronization

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92296

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An out-of-bounds write exists in the printf function within the printf.c file due to improper input validation. This flaw allows for local escalation of...

PT-2026-92077

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description Insufficient validation of MonitorIds array values during the parsing of RDP connection files allows unbounded array indexing within the xf detect monitors function. A remote attacker can use a...

CVE-2026-55301: Buffer Copy without Checking Size of Input

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56942: Out-of-bounds Write

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55317: Improper Input Validation

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92126

Name of the Vulnerable Software and Affected Versions containers/storage library affected versions not specified Description A flaw in the containers/storage library allows a crafted tar archive containing a malicious whiteout header e.g. victim/.wh. to replace the extraction destination director...

CVE-2026-0171: Out-of-bounds Write

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...