EUVD-2026-64882

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

CVE-2026-59566 Local denial-of-service

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

CVE-2026-59565 Local and kernel denial-of-service

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...

EUVD-2026-64881

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...

CVE-2026-74610

A flaw was found in the Linux kernel's Transport Layer Security TLS implementation. An unprivileged local user could trigger a kernel null pointer dereference by sending specific data on a loopback TCP socket with the TLS Upper Layer Protocol ULP attached. This vulnerability occurs because the TL...

CVE-2026-74605

A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to cause a system crash or other unpredictable behavior due to a race condition during the freeing of an eventfs inode. The issue stems from improper synchronization when iterating over a specific...

CVE-2026-74590

A flaw was found in the Linux kernel's fsverity subsystem. A local attacker could exploit a race condition in the bpfgetfsveritydigest function by concurrently modifying its digestsize argument. This could lead to a system crash, resulting in a denial of service...

CVE-2026-74732

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. When a user turns off the display over HDMI on systems with older DCE timing generators, the driver attempts to call a function istgenabled that may not be implemented. This unconditional call can lead to a NULL pointer...

CVE-2026-74593

A flaw was found in the Linux kernel's schedext component. An incorrect locking order within the scxcgrouplock function can lead to a deadlock. This occurs when certain cgroup operations, such as enabling/disabling scx or removing a cgroup, happen concurrently with cpu.weight writes. A local...

CVE-2026-59295

It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16 Micrometer 1.9.18 and earlier...

CVE-2026-74643

A flaw was found in the Linux kernel's DAMONSAMPLEMTIER module. A local user can trigger a division-by-zero error in the damosquotascore function by providing zero values for the node0memusedbp or node0memfreebp parameters when enabling the module. This vulnerability leads to a kernel crash,...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel versions 5.8 through 5.19.x, prior to 5.19.16, local attackers who were able to inject WLAN frames into the mac80211 stack could carry out a NULL pointer dereferencing denial-of-service attack against the beacon protection of P2P devices...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder caused an infinite loop when writing persistent errors. An attacker could trigger...

Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem before version 3.3.2 had some DoS vulnerabilities when parsing XML that contained many special characters, such as whitespace characters, , , and . The REXML gem versions 3.3.3 or later include patches to fix these vulnerabilities...

EUVD-2026-64774

Micrometer-instrumented Apache HttpAsyncClient 4.x or 5.x usage via MicrometerHttpClientInterceptor can leak memory unboundedly when asynchronous requests fail before receiving a response e.g. connection resets or timeouts. Tracking state for these requests remains in memory indefinitely, and...

K000163056: Linux kernel vulnerability CVE-2026-53133, CVE-2026-53176, CVE-2026-53215, CVE-2026-53265

Security Advisory Description CVE-2026-53133 In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes = 4G When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries. When...

CVE-2026-78186

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

libheif-cve-2026-50142

CVE-2026-50142 — libheif Allocazione heap illimitata nel parser di sequenze HEIF modalità dimensione fissa stsz Gravità: Alta CVSS 7.5 Avviso: GHSA-jvmp-j3cw-84mh Corretto: commit a6caa38 da @farindk Tempo per la correzione: 1 ora Riepilogo Un file HEIF appositamente creato di 1.477 byte innesca...

Moderate: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...