CVE-2026-72436

A flaw was found in the netfilter: ipset component of the Linux kernel. This vulnerability occurs because a specific operation, testbit, is used in a way that lacks proper safeguards when multiple processes access shared data simultaneously. This can lead to situations where the system processes...

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-72263

A flaw was found in the Linux kernel's ASoC Audio System on Chip Sound Open Firmware SOF topology component. When a topology filename contains "dummy" and a specific counter is zero, the sndsofloadtopology function fails to deallocate previously assigned memory. This oversight results in a memory...

SUSE-SU-2026:3635-1 Security update for python

This update for python fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation directory when installing and...

CVE-2026-72377

A flaw was found in the Linux kernel's Andrew File System AFS module. When fscache is enabled, AFS symlinks and mountpoints are incorrectly handled during memory management operations. This can lead to a pointer dereference, which a local attacker could potentially exploit to cause a system crash...

CVE-2026-72182

A flaw was found in the Linux kernel's power supply charger-manager component. A reference count refcount leak occurs within the isfullcharged function. This happens when a reference to the fuel gauge power supply is obtained but not properly released if a specific voltage check succeeds. This...

CVE-2026-72290

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for s390 PCI. During the setup of guest interrupt forwarding, a reference count refcount to the Guest Interrupt Service Call GISC may not be properly released if subsequent setup steps fail. This resource leak can lead to...

MINI-HVH4-C4MH-GQV4

Bulletin has no description...

EUVD-2026-60480

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory...

EUVD-2026-60505

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-78033

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw in the PGC / Excel Plugin component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, ...

PT-2026-78180

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77152

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64 t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

PT-2026-78231

Name of the Vulnerable Software and Affected Versions Tapo C200 version v5 Description An improper input validation issue exists in the configuration service used for processing encrypted credential data. An attacker can send oversized crypted ciphertext values that trigger exception handling...

PT-2026-77031

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description The stringprep module incorrectly processes characters from RFC 3454 tables B.2 or B.3 by using the latest Unicode codepoint attributes instead of the required Unicode 3.2.0. This leads to...

Linux Distros Unpatched Vulnerability : CVE-2026-74382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsbpf: prevent unbounded recursion in offload rollback Quan Sun reported 1 a stack overflow in clsbpfoffloadcmd. Reproducer on netdevsim: add a skip...

PT-2026-77015

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A denial-of-service issue exists within the Widget component. Recommendations Update Firefox to...

PT-2026-78062

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.0 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than the...

PT-2026-77848

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financia...

VMware Fusion 25.x < 26.0.0 Information Disclosure (VMSA-2026-0006)

The version of VMware Fusion installed on the remote macOS host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor wit...