BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59639 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-62289

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero and crash or corrupt tiling results when heifimagehandlegetimagetilinghandle, 1, &tiling is called...

SUSE CVE-2026-68145

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and len is 0, the unsigned subtraction underflows to SIZEMAX, producing a...

CVE-2026-75904

libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...

GO-2026-6227 Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts in github.com/authorizerdev/authorizer

Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts in github.com/authorizerdev/authorizer...

CVE-2026-72142

A flaw was found in the i2c-imx driver of the Linux kernel. When an I2C slave device performs an SMBus block-read operation with a byte count of zero, the atomic polling path in the driver fails to properly release the I2C bus. This can cause the bus to become stuck, requiring a power cycle of th...

Exploit for CVE-2026-69414

ShieldBreak - Windows Defender 0day vulnerability Microsoft h...

ANT-2026-3ZHWVDTX · kjur/jsrsasign · Improper Verification of Cryptographic Signature

other high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-3ZHWVDTX: security off-by-one DSA signature validation error; different than CVE-2026-4599,01,02 In jsrsasign's DSA verification...

SUSE CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102113 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix divide-by-zero in OSFWSSMODULO nfosfmatchone computes ctx-window %...

Linux Distros Unpatched Vulnerability : CVE-2026-72394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: ...

Linux Distros Unpatched Vulnerability : CVE-2026-72238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the syste...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102116 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, iff mode-refresh someho...

Linux Distros Unpatched Vulnerability : CVE-2026-72343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point priv-statsnch is...

Amazon Linux 2 : qemu, --advisory ALAS2-2026-3866 (ALAS-2026-3866)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3866 advisory. In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, an...

Linux Distros Unpatched Vulnerability : CVE-2026-72135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave...

Linux Distros Unpatched Vulnerability : CVE-2026-72010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup/cpuset: rebind mm mempolicy to effectivemems, not memsallowed Creating a child cpuset where cpuset.mems is never set leads to a div/0 when a VMA mempolic...

Linux Distros Unpatched Vulnerability : CVE-2026-72414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the...

libssh: libssh: denial of service via zero advertised channel packet size

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

ANT-2026-3CJT2BP4 · libjxl · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-3CJT2BP4: Heap buffer overflow in JPEG...