CVE-2026-65052

Ninja Forms WordPress plugin (v3.14.8 and earlier) contains an improper input validation vulnerability in the form calculation path. Specifically, unauthenticated attackers can submit values that do not match configured options in ListSelect or ListRadio fields via the ajax submit endpoint, causi...

CVE-2026-29007 U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c

U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcprxstatemachine net/tcp.c when CONFIGPROTTCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attacke...

PT-2026-56474

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.04-rc4 Description An out-of-bounds read occurs in the tcp rx state machine function net/tcp.c when CONFIG PROT TCP is enabled. A remote attacker can read beyond TCP segment boundaries by sending a malicious packe...

ROS-20260630-73-0038

The vulnerability in the kernel-lt is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-52934

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tvlv: reject oversized TVLV packets batadvtvlvcontainerogmappend builds a TVLV packet section from the tvlv.containerlist. The total size of this section is computed by batadvtvlvcontainerlistsize, which sums the size...

Heap Buffer Overflow

Electron is vulnerable to Heap Buffer Overflow. The vulnerability is due to incorrect byte length calculations in Buffer operations, which allows an attacker to trigger out-of-bounds memory access resulting in heap buffer overflows or underflows...

Malwarebytes EDR 数字错误漏洞

Malwarebytes EDR is a terminal detection and response platform provided by the American company Malwarebytes. Version 1.0.11 of Malwarebytes EDR contains a vulnerability related to input validation. This vulnerability arises from truncating data exceeding 4GB during computing hash calculations,...

CVE-2026-46289

A flaw was found in the Linux kernel's lib/scatterlist component. Incorrect length calculations within the extractkvectosg function, when extracting data from a kvec to a scatterlist, could lead to writing beyond intended page boundaries. Additionally, when extracting a user buffer, the scatterli...

CVE-2026-46289

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extractkvectosg Patch series "Fix bugs in extractitertosg", v3. Fix bugs in the kvec and user variants of extractitertosg. This series is growing due to useful remarks made by...

ROS-20260605-73-0009

The vulnerability in ImageMagick7 is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0008

The vulnerability in ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0004

The vulnerability in ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0010

The vulnerability in ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0011

The vulnerability in ImageMagick7 is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0017

The vulnerability in ImageMagick7 is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0016

The vulnerability in ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260605-73-0007

The vulnerability in ImageMagick7 is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-8282-2 unbound vulnerabilities

USN-8282-1 fixed vulnerabilities in Unbound. This update provides the corresponding updates for CVE-2026-41292 in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS and CVE-2026-42959, CVE-2026-42960 in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Andr...

USN-8329-1: FFmpeg vulnerability

It was discovered that the FFmpeg CAF decoder incorrectly handled certain file size calculations. An attacker could possibly use this issue to cause FFmpeg to crash, resulting in a denial of service...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistent calculations of plane dimensions in the drm/gem mechanism. This vulnerability may lead to...