CVE-2026-112935

A flaw was found in filelock. A local attacker can exploit a race condition in the SoftFileLock mechanism during stale lock cleanup. Under specific timing and file system conditions involving reused file nodes, filelock may mistakenly delete an active lock marker held by another process. This...

CVE-2026-112914

A flaw was found in filelock. A local attacker with write access to a shared lock directory can exploit the SoftFileLock mechanism to cause unauthorized file exposure. When filelock restores a stale lock marker by name, the attacker can swap in a symbolic link, causing the victim's process to...

CVE-2026-112934

A flaw was found in filelock. A local user with rename permissions in the lock directory can cause a Denial of Service DoS by replacing lock holder records with a named pipe, causing locking operations to stall indefinitely. Under permissive file system policies, an attacker can also link target...

CVE-2026-112909

A flaw was found in filelock. A local attacker can exploit this vulnerability by placing a target regular file at the expected lock file path using a file rename or hard link. When filelock acquires the lock, it can unintentionally truncate the contents of the target file and alter its permission...

CVE-2026-112911

A flaw was found in filelock. This vulnerability allows a local attacker to manipulate lock state by pre-creating a protocol directory within a shared parent directory. When filelock adopts this untrusted directory, the attacker can alter the protocol state and admit unauthorized concurrent lock...

CVE-2026-113643

A vulnerability exists in EspoCRM versions up to 9.3.10/10.0.10 within the PDF Rendering Pipeline component. Specifically, the ImageSourceProvider::get function in the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php fails to properly validate the ID argument. This flaw allows for a...

CVE-2026-113643 EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass...

EUVD-2026-105252

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass...

CVE-2026-98608

A flaw was found in the Linux kernel's VirtIO GPU graphics processing unit driver. When handling resource creation requests, an improper error-handling path fails to release acquired object references upon failure, causing memory and system resources to leak. A local user could exploit this flaw ...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

CVE-2026-95210

A flaw was found in GnuTLS. Improper certificate validation causes the library to accept certificates containing invalid extensions. A remote attacker could exploit this flaw by presenting a specially crafted certificate during a secure connection. Successful exploitation may allow an attacker to...

CVE-2026-95168

A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...

CVE-2026-97605

A flaw was found in the Linux kernel. When resizing the decompression stream pool in the Enhanced Read-Only File System EROFS encounters a memory allocation failure, an uninitialized stream is improperly retained in the active pool. A local user accessing or decompressing an affected filesystem c...

CVE-2026-93255

A flaw was found in the Linux kernel's Btrfs file system. A race condition occurs between background read I/O completion and extent buffer cache invalidation during unmount operations because read status flags are cleared outside of the reference count lock. A local user performing file system...

CVE-2026-93243

A flaw was found in the Linux kernel's secret memory secretmem subsystem. A local user can bypass locked memory resource limits by repeatedly mapping and unmapping secret memory ranges. Because the kernel fails to properly track these unevictable memory pages against user limits, an unprivileged...

CVE-2026-93241

A flaw was found in the Linux kernel. When the out-of-memory OOM killer terminates a multi-threaded process and asynchronous memory cleanup cannot complete, exiting threads continue to invoke memory reclamation and serialize behind an internal lock. A local user can exploit this vulnerability by...

CVE-2026-93226

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition occurs when reading route exception lists without proper synchronization against concurrent route updates. A local user can trigger this flaw by querying network routing tables during simultaneous route updates,...

CVE-2026-93206

A flaw was found in the Linux kernel. This vulnerability allows an unprivileged local attacker to bypass security restrictions. By obtaining a file descriptor from a privileged process, the attacker can read the entire Peripheral Component Interconnect PCI configuration space, which could lead to...

CVE-2026-90019

A flaw was found in the Linux kernel. A null pointer dereference can occur in the usbputfunctioninstance function within the USB gadget subsystem. This issue arises because a file descriptor fd is not allocated before being dereferenced in an error path, which can lead to a system crash. A local...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...