CVE-2026-79775

A flaw was found in rclone. The archive backend's SquashFS parser fails to validate attacker-controlled superblock and metadata values before use. An attacker who can place or modify a malicious SquashFS image in storage exposed through an rclone :archive: remote can trigger multiple...

CVE-2026-65918

A flaw was found in torchvision, a library for PyTorch. This vulnerability, an out-of-bounds heap read in the GIF decoder, allows a remote attacker to supply specially crafted or truncated GIF files. Successful exploitation can lead to a denial of service, causing the application to crash, or the...

CVE-2026-41992

A flaw was found in GNU gzip. This global buffer overflow vulnerability in the LZH decompression logic is caused by improper reuse of shared global state between different decompression formats. An attacker can exploit this by providing a specially crafted LZW file followed by a specially crafted...

CVE-2026-80635

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability occurs because the driver does not adequately validate the length of certain firmware responses. An attacker could potentially craft a malicious firmware response, leading to an out-of-bounds read of stale heap data...

USN-8697-1: GNU Core Utilities vulnerabilities

It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. CVE-2025-5278 It was discovered that GNU Co...

USN-8697-1 coreutils vulnerabilities

It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. CVE-2025-5278 It was discovered that GNU Co...

CVE-2026-57585

A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free CWE-416, occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an...

CVE-2026-82680

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-80723

A flaw was found in the of: reservedmem component of the Linux kernel. When the device tree defines more dynamic regions than the MAXRESERVEDREGIONS array can hold, the fdtscanreservedmem function performs an out-of-bounds write. This vulnerability can lead to memory corruption, potentially...

CVE-2026-80631

A flaw was found in the Linux kernel's Btrfs filesystem, specifically within its LZO decompression functionality. A local attacker could provide a specially crafted Btrfs image containing a compressed segment that, due to improper validation of its length, overflows the compressed input buffer...

CVE-2026-80672

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability arises from an integer truncation error when validating the size of the $LogFile restart area and its log client record array. An attacker can exploit this by mounting a specially crafted NTFS image, leading to an...

EUVD-2026-68461

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680 D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680

D-Link DSM-G600 version 1.01 is affected by an out-of-bounds write vulnerability in the Multipart Handler component of the /load_file.cgi endpoint. A remote attacker with low privileges can trigger this memory corruption without user interaction, potentially compromising the confidentiality, inte...

CVE-2026-80670

A flaw was found in the Linux kernel's perf tools. The machineresolve function, responsible for resolving machine addresses, does not properly validate CPU index values from untrusted perf.data samples. A local attacker could provide a specially crafted perf.data file with a large CPU index,...

CVE-2026-80604

A flaw was found in the Linux kernel's Human Interface Device HID core. When processing numbered reports, the hidgetreport function can attempt to read data from an invalid memory location if a size of zero is provided. This out-of-bounds read can lead to a kernel panic, effectively causing a...

CVE-2026-80595

A flaw was found in the Linux kernel. The ims-pcu driver processes response data from device buffers without verifying the actual length of the data sent by the device. This oversight can lead to out-of-bounds reads, potentially allowing an attacker to access sensitive information or cause system...

[SECURITY] [DLA 4763-1] librabbitmq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4763-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 31, 2026 https://wiki.debian.org/LTS -...

CVE-2026-80693

A flaw was found in the Linux kernel's idpf component. A privileged control plane such as a Physical Function or a hypervisor device model could exploit a vulnerability by providing a malformed reply to an interrupt-vector allocation request. This malformed reply, where the sum of per-chunk vecto...

CVE-2026-80725

A flaw was found in the Linux kernel’s Generic Receive Offload GRO component, which handles network packet aggregation. Improper validation of BIG TCP aggregation criteria allows a remote attacker to send specially crafted network frames. This can lead to an out-of-bounds write when processing IP...