CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

OESA-2026-3118 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

Important: nvidia-kmod-common

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

CVE-2024-58353

creationtimestamp| type| source ---|---|--- 2026-07-23 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduo7nkvw2j 2026-07-24 03:32:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mreg3ynzgo25...

EUVD-2026-48427

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...

CVE-2026-61338

creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mry4pcuyk525...

CVE-2026-61074

creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60448

creationtimestamp| type| source ---|---|--- 2026-07-23 17:17:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrmikdajjq2y...

CVE-2026-60426

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvswy4non2l...

CVE-2026-65912

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cjmm-f4jc-qw8r...

DEBIAN-CVE-2026-65914

DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...

BELL-CVE-2026-64207

Bulletin has no description...

BELL-CVE-2026-60147

Bulletin has no description...

CGA-68M5-RJFW-VCRV

Bulletin has no description...

GO-2026-6019 Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper...

CVE-2026-13181

creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b 2026-09-08 22:20:02+00:00| seen|...

SUSE CVE-2026-47030

unknown...

gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

DEBIAN-CVE-2026-41637

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...

ROOT-APP-GOBINARY-CVE-2026-2303 CVE-2026-2303 in rootio-go.mongodb.org/mongo-driver - Patched by Root

Root has patched CVE-2026-2303 in the rootio-go.mongodb.org/mongo-driver package for Root:Go. Multiple fixed versions available...