CVE-2026-90162

A flaw was found in ksmbd, a kernel module for SMB3 protocol support in the Linux kernel. A race condition exists in the smb2lock function, where a lock object can be freed while still being referenced, known as a Use-After-Free, and then freed again, known as a Double-Free. This occurs when...

CVE-2025-58771

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...

CVE-2025-58773

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2025-58772

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2025-58774 UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2025-58774

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger a “Buffer Access with Incorrect Length Value” (CWE-805). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and ...

CVE-2025-58773

The AMI APTIOV BIOS contains an Out-of-bounds Write vulnerability (CWE-787) reachable via local access. Successful exploitation can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and Availability of the system....

CVE-2025-58772

The AMI APTIOV BIOS contains vulnerabilities that allow local users to trigger a "Classic Buffer Overflow" (CWE-120). Successful exploitation of this flaw can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's Confidentiality, Integr...

CVE-2025-58771

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger an Integer Overflow or Wraparound (CWE-190). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's confidentiality, integrity, and ava...

CVE-2026-90092

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol implementation. A race condition can occur when a new connection is established while a parent L2CAP channel is being torn down, due to inconsistent locking. This can lead to a Use-After-Free UAF...

RLSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

RLSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

RLSA-2026:80687 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

CVE-2026-109250

A flaw was found in FreeRDP. This vulnerability allows a local attacker with access to a physical smartcard or token to trigger a heap-based buffer overflow during smartcard key enumeration. By presenting more public key objects across multiple slots than the internal storage buffer can hold, an...

CVE-2026-109255

A flaw was found in FreeRDP. An integer truncation issue in license stream length validation allows a malicious Remote Desktop Protocol RDP server to bypass size checks by sending a specially crafted licensing request. This flaw leads to an undersized memory allocation and a heap-based buffer...

vulnerabilities hidden in GitLab

GitLab has discovered vulnerabilities in the GitLab Community Edition CE and Enterprise Edition EE, specifically in versions prior to 19.2.8, 19.3.5, and 19.4.2. These vulnerabilities exist in various components of GitLab, including the CI/CD pipeline environment, authentication mechanisms, APIs,...

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition CE and Enterprise Edition EE software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execu...

CVE-2026-92705

A flaw was found in Aegisub. The application automatically loads and runs automation scripts referenced within Advanced SubStation Alpha ASS subtitle project files without prompting the user for confirmation. By tricking a user into opening a specially crafted subtitle file referencing a maliciou...

CVE-2026-103316

The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLDINSERTLIBRARIES. An attacker with local user-level code execution can execute arbitrary code within the macOS version of the DigiD app, thereby gaining...