The vulnerability of the cpsw_ndo_set_rx_mode_work() function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver from Texas Instruments’ Linux kernel, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the zynqmp_efuse_access() function in the drivers/nvmem/zynqmp_nvmem.c file of the NVMEM device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zynqmpefuseaccess function in the drivers/nvmem/zynqmpnvmem.c file of the NVMEM device driver in the Linux operating system is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the apply_patch() function in the cJSON_Utils.c component of the library for working with JSON objects in C language allows a attacker to compromise data integrity.

The vulnerability of the applypatch function in the cJSONUtils.c component of the C language JSON object handling library is related to an incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the Jakarta Mail and Eclipse Angus Mail email creation and sending libraries, related to improper processing of input data endings, will affect the integrity of the protected information.

The vulnerability of the Jakarta Mail and Eclipse Angus Mail email creation and sending libraries is related to improper processing of input data’s endings. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

JLSEC-2026-850

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data...

io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the CorsHandler component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

CVE-2026-64392

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to bypass filesystem permission checks during 'delete-on-close' operations. Specifically, when a file handle is torn down, the base-file unlink and extended attribute xattr removal operations...

PT-2026-76243

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data...

PT-2026-76234

In WriteOnePNGImage of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory and memset allows for an out-of-bounds write later when PopShortPixel from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply ...

The vulnerability of the packet_do_bind() function in the net/packet/af_packet.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the `init_amd_zen1()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the tcf_csum_act() function in the net/sched/act_csum.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow a remote attacker ...

The vulnerability of the nvme_poll() function in the driver/nvme/host/pci.c file of the NVME driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the smb2_get_ea() function in the fs/smb/server/smb2pdu.c file of the Smb file system in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smb2getea function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

CVE-2026-59084

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

CVE-2026-64284

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 systems. This vulnerability occurs when KVM handles fastpath exits, where it may fail to execute vendor-specific cleanup operations before returning control to the virtual machine's userspace. Consequently, memory...