CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16359 Incorrect boundary conditions in the Audio/Video: GMP component

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16393

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-63945

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A race condition exists where the isosockcleartimer function can access connection data without proper locking, while another function, isoconndel, concurrently modifies the same data. This can lead to a NULL point...

CVE-2026-64093

A flaw was found in the batman-adv component of the Linux kernel. A race condition exists where a timer can be re-armed after its associated reference has been removed during cleanup. This can occur when batadvtpsendercleanup attempts to shut down a timer, but a separate execution context re-arms...

CVE-2026-64190

A flaw was found in the Linux kernel's team driver. A local attacker with CAPNETADMIN capabilities could exploit a race condition during a team device mode change. This occurs when the teamchangemode function clears internal operation pointers before safely restoring them, while the teamxmit...

CVE-2026-64142

A flaw was found in the Linux kernel's ksmbd component. Two race conditions in the ksmbddurablescavenger function can lead to list corruption and a Use-After-Free UAF vulnerability. A remote attacker could potentially exploit these race conditions during durable handle scavenging and lookup...

CVE-2026-53368

A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. A race condition exists where the f2fsneeddentrymark function incorrectly reads natentry flags without proper synchronization during checkpoint operations. This can lead to an inconsistent inode block marking state,...

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...

CVE-2026-64189

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the ipsetlist resize operation and dump operations. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated. A successful exploitation of this flaw cou...

PT-2026-62064

Name of the Vulnerable Software and Affected Versions Data::RoaringBitmap::Shared versions prior to 0.02 Description This issue occurs when creating a world-readable mmap backing file and opening it without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2730)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock !=...

PT-2026-62068

Name of the Vulnerable Software and Affected Versions Data::DisjointSet::Shared versions prior to 0.02 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using the O EXCL or O NOFOLLOW flags. The segment is created in dsu.h using the op...

PT-2026-62065

Name of the Vulnerable Software and Affected Versions Data::RingBuffer::Shared versions prior to 0.04 Description This issue occurs when a world-readable mmap backing file is created and opened without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode of...

ALSA-2026:42736 Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...

PT-2026-62062

Name of the Vulnerable Software and Affected Versions Data::RadixTree::Shared versions prior to 0.02 Description This issue occurs when a world-readable mmap backing file is created and opened without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode of...

CVE-2026-55219

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show.php executes a pessimistic row lock lockForUpdate outside of an active database transaction. Because MySQL/MariaDB...

CVE-2026-55219

CVE-2026-55219 – Paymenter race condition (version

CVE-2026-55219 Paymenter: Race condition in payWithCredit() enables credit double-spend

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show.php executes a pessimistic row lock lockForUpdate outside of an active database transaction. Because MySQL/MariaDB...