CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80849

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a network connection using TCP-AO is re-established with a different server, a timing issue can cause the system to attempt to use memory that has already been released. This 'use-after-free' vulnerabilit...

CVE-2026-80840

A flaw was found in the Linux kernel's IPv6 Segment Routing over IPv6 SRv6 implementation. A remote attacker can exploit this vulnerability by sending specially crafted IPv6 packets that are then decapsulated as IPv4 packets. Due to improper handling of data during this process, the system attemp...

CVE-2026-84429

A flaw was found in Django. Inefficient processing occurs when the HTTP header parsing function handles quoted parameter values containing numerous separator characters. A remote, unauthenticated attacker could exploit this flaw by sending requests with crafted header parameters, causing excessiv...

CVE-2026-106116 ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain, ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a sma...

CVE-2026-106116 ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain, ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a sma...

EUVD-2026-93558

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

WordPress Core <= 7.1.2 - Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability

Contributor+ DoS via infinite loop in WPHttp::makeabsoluteurl vulnerability discovered by Anthropic in WordPress core versions = 7.1.2...

CVE-2026-106112

The ImageSharp 2D graphics library (versions 4.0.0 through 4.1.2 ) is vulnerable to an out-of-bounds write (CWE-787) during ICC LUT16 conversion. The root cause is that ClutCalculator.Calculate and LutEntryCalculator.CalculateLut use a Vector4 to store intermediate and output values, but the conv...

CVE-2026-106110

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T4 end-of-line codes, and...

CVE-2026-106110 ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T4 end-of-line codes, and...

CVE-2026-106110

The ImageSharp 2D graphics library (versions 2.0.0 through 4.1.2 ) contains a vulnerability where the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. Specifically, TiffCcittCompressor.Initialize fails to reserve sufficient space for row data and ...

CVE-2026-90271

A flaw was found in the Linux kernel's armmpam component. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS. The issue arises when a user unbinds a Memory System Component MSC after an error interrupt, causing a NULL pointer dereference...

CVE-2026-90202

A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...

CVE-2026-80897

A flaw was found in the netfs component of the Linux kernel. When netfspreparereaditerator processes readahead folios, it may fail to release these folios if an error occurs during the rollingbufferloadfromra operation. This oversight can lead to a memory leak, potentially allowing a local attack...

CVE-2026-92493

A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2020-1350

CVE-2020-1350 SigRED Workaround to mitigate the impact of the vulnerability by reducing the TCP Recieve Packet Size Maximum Limit on the DNS Server and restarting DNS...

dovecot: Dovecot: Denial of Service and potential message duplication via connection limit exhaustion

A flaw was found in the Dovecot mail server's submission-login component. This vulnerability occurs when the server reaches its maximum allowed user IP connections, leading to a crash due to file descriptor handling issues. This can result in a denial of service, preventing users from sending...