PT-2026-65630

Name of the Vulnerable Software and Affected Versions Samba Active Directory Domain Controller AD DC affected versions not specified Description An issue combining LDAP filter injection and improper authorization checks exists when processing LDAP Compare requests. The software fails to properly...

CVE-2026-64362

A flaw was found in the Linux kernel's lg-g15 Human Interface Device HID driver. This vulnerability, a use-after-free, occurs when a Logitech G15, G15 v2, or G510 keyboard is unplugged while a work item is pending. The driver fails to properly cancel this pending work, allowing it to access memor...

Fedora 43 : webkitgtk (2026-ec8e535c6e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec8e535c6e advisory. Fire scrollend event for instant programmatic scrolls. Increase network idle connection timeout to 115 seconds. Fix several crashes and rendering...

CVE-2026-64263

CVE-2026-64263 affects the Linux kernel fuse-uring component. The issue arises when cancelled entries moved to ent_in_userspace are dereferenced by ent_list_request_expired(), causing a crash. The fix updates fuse_uring_cancel() to free the cancelled entry and drop queue_refs directly, ensuring s...

Linux Distros Unpatched Vulnerability : CVE-2026-47050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.8. Easily exploitable...

[SECURITY] [DSA 6398-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6398-1 [email protected] https://www.debian.org/security/ Alberto Garcia July 23, 2026 https://www.debian.org/security/faq -...

RLSA-2026:42062 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash CVE-2026-39872 webkitgtk: webkitgtk:...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

EUVD-2026-47304

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

libssh: libssh: use-after-free via data callbacks on closed channels

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850 Libssh: libssh: use-after-free via data callbacks on closed channels

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-59850

CVE-2026-59850 affects libssh: after a channel is closed, data callbacks can run on freed data, causing use-after-free and crashes. The issue is fixed in libssh 0.11.5; SUSE/OpenSUSE advisories map this CVE to the libssh update to 0.11.5 with related fixes. Affected behavior is use-after-free on ...

CVE-2026-59850 Libssh: libssh: use-after-free via data callbacks on closed channels

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-63879

A flaw was found in the Linux kernel, specifically within the drm/amdgpu component. This vulnerability arises from incorrect handling of a notifier sequence in the amdgpuhmmrangegetpages function, where the sequence can be read more than once. This can lead to the system processing invalid memory...

RLSA-2026:42088 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash CVE-2026-39872 webkitgtk: webkitgtk:...

CVE-2026-63729

The CVE affects the SyncTeX parser (synctex_parser.c) shipped with TeX Live and used by downstream consumers like GNOME Evince. A heap use-after-free exists when processing malformed .synctex or .synctex.gz files: a malformed SyncTeX file can create a ref node with a NULL parent pointer, causing ...

PT-2026-62243

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human...