Security information for Hitachi Disk Array Systems

Overview CVE-2026-33828 | Windows Device Health Attestation DHA Elevation of Privilege Vulnerability CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-40404 | Windows Universal Disk Format File System Driver UDFS Elevation of Privilege...

NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA TensorRT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Sli...

The vulnerability in the `arch/x86/entry/entry_fred.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/x86/entry/entryfred.c component of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74683

CVE-2026-74683 is a speculative execution vulnerability in the Linux kernel's evdev input subsystem . The user-supplied event type index passed to the EVIOCGMASK and EVIOCSMASK ioctls is used to index the static counts array in evdev_get_mask_cnt() and the client evmasks array in evdev_get_mask()...

CVE-2026-78003

The Mailgun for WordPress plugin for WordPress (versions up to and including 2.2.0 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) via path traversal. The root cause is insufficient input validation in the add_list() function, which accepts user-controlled array keys from...

PT-2026-79634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/dibs component where a device interrupt handler may remain active after the dibs dev del function is called, leading to a Use-After-Free UAF condition when...

PT-2026-79675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS estimator kthread 0 where it starts with zeroed chain and tick limits until the initial calculation phase completes. If a network namespace teardown clears...

Linux Distros Unpatched Vulnerability : CVE-2026-74585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against...

CVE-2026-74466

A flaw was found in the Linux kernel's s390/zcrypt component. Under specific conditions, a user-controlled domain value, derived from CCA or EP11 ioctl structures, is used as an array index without a proper speculation barrier. This oversight could allow for speculative memory reads, potentially...

SUSE CVE-2026-68244

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings on proto context error After a successful BALANCE/PARALLELSUBMIT extension on context creation, error during processing of next user extension leaks the siblings array. Fix that. Discovered usin...

SUSE CVE-2026-75904

libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...

EUVD-2026-63723

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102084 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an E...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102074 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend The loops in...

CVE-2026-74408

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This vulnerability arises from an out-of-bounds memory access within the athtxedmatasklet function. An internal queue identifier, which is a 4-bit hardware field, can exceed the bounds of the transmit queue array. This can lead to memory...

CVE-2026-17163

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field...

CVE-2026-17163

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a network-based denial-of-service attack (CVSS 7.5) caused by improper validation of an array size field; no exploit or patch details are provided in the documents, so monitor IBM's support page for remediation guidance.

CVE-2026-17163 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field...

CVE-2026-17163 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...