EUVD-2026-64846

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...

Malicious code in dext-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329047f71cd6b35084bea7ed22978ba88e02cb557a5490b6133a70a5a0859a19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14406 Malicious code in dext-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329047f71cd6b35084bea7ed22978ba88e02cb557a5490b6133a70a5a0859a19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-53624

A flaw was found in the Fiber web framework's helmet middleware. This vulnerability occurs because the middleware incorrectly checks for the HTTPS protocol, preventing the Strict-Transport-Security HSTS response header from being set. This can allow an attacker to bypass security mechanisms,...

CVE-2026-74649

A flaw was found in the Linux kernel's rtl8723bs driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted Wi-Fi Protected Equivalent Privacy WEP shared-key authentication challenge. This could lead to an out-of-bounds write or information disclosure due ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: The check for CONFIGPPCE500 in maskuseraddress was corrected. maskuseraddress incorrectly checked for CONFIGE500 instead of CONFIGPPCE500. As a result, maskuseraddressisel was not used on E500 hardware. The check...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Handshake: The DONE command requires admin permission. ACCEPT and DONE are the two responses of the handshake genl family; both are intended for use by the trusted handshake agent tlshd. ACCEPT already requires GENLADMINPERM; DON...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: The iph-ihl field was validated in the nfflowip4tunnelproto function. A sanity check was added for this field before using it to calculate the header size. This prevents out-of-bounds access and malformed IP...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: ipc3-control: Fixed a heap overflow in bytesext put/get The ipccontroldata buffer is allocated using kzallocmaxsize, where maxsize covers the entire struct sofipcctrldata, including its flexible array payload...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: A bounds check has been added for the firmwaremacid field in the link lookup process. The macid field in RX descriptors is 8 bits wide 0-255, but the assoclinkonmacid array contains only RTW89MAXMACIDNUM 128 entries...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvme: fixed the bounds check for fdpcidx in FDP. The bounds check for fdpcidx sets n = NUMFDPC + 1, but the comparison used “” instead of “=”. This incorrectly accepted fdpidx when it equals n i.e., NUMFDPC + 1...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on the CRIU restore queue type and mqdsize. We were not checking whether the values provided in the private data of the kfd CRIU restore were within bounds. For the queue type, add a const value...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fixed the crash that occurs during shutdown when the component is not probed. When the main component is not probed—for example, when the dw-hdmi module is not yet loaded or in a probe defer state—the following crash...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Preserve pointer spill metadata during half-slot cleanup The cleanfuncstate function cleans dead stack slots in 4-byte halves. When the high half of a STACKSPILL slot is dead and the low half remains alive, cleanup converts...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Exclusive maps for bpfmapelem iterators are rejected Exclusive maps also known as exclproghash are meant to be accessible only from the single program whose hash matches that map. This rule is enforced by...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: A bounds check was added before accessing EA entries. In ntfsealookup and ntfslistxattr, this ensures that there is sufficient space in the EA entry before accessing the nextentryoffset field of that EA entry...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock The commit 2d1f7b65f5de “dm cache policy smq: fix missing locks in invalidating cache blocks” added mq-lock around the destructive part of smqinvalidatemapping, but left...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: GPU: host1x – Fixed the return value check for iommumapsgtable The commit “iommu: returning the full error code from iommumapsgatomic” changed iommumapsgtable to return an ssizet value in error cases, instead of a sizet value ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Fixed an off-by-one error in the decoding of mapping pairs by validating bounds checks. In ntfsmappingpairsdecompress, attrend points to one byte past the end of the attribute record: attrend = u8 attr +...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dm-verity: fixed a possible NULL pointer dereferencing issue. Fixed a possible NULL pointer dereferencing in dmverityloadpinisbdevtrusted if the device does not have a table...