CVE-2026-20760

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

EUVD-2026-56477

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occu...

CVE-2026-11733

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device...

CVE-2026-73074

Vim prior to 9.2.0841 is affected by a heap-related vulnerability in text property handling. The function prop_add_one() in src/textprop.c uses proplen from get_text_props() to increment a uint16_t property count beyond 0xffff, causing a wrap to zero and copying existing text-property records int...

CVE-2026-68132

A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the dothawallcallback function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further...

CVE-2026-68403

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. During the driver's initialization and cleanup process, an uninitialized work item could be accessed and cancelled. This issue occurs if a specific memory allocation fails, leading to an invalid work drain. A local attacker could...

CVE-2026-68261

A flaw was found in the Linux kernel's drm/imagination component. A local user could exploit this vulnerability by passing an invalid virtual machine VM context handle to the DRMIOCTLPVRCREATECONTEXT ioctl. This improper error checking can lead to a kernel crash, resulting in a Denial of Service...

CVE-2026-68203

A flaw was found in the Linux kernel's vivid media driver. This vulnerability involves two cleanup bugs within the vividinit function. Firstly, a reference leak occurs if platformdeviceregister fails, preventing the proper release of device resources. Secondly, an incorrect function call during...

CVE-2026-68273

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

CVE-2026-73071 Vim: Use-after-free in JSON Decoding

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestring invokes channelfill to refill and free the current buffer, causing the error path to read freed memory instead of reader-jsbuf +...

CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

CVE-2026-72745

A flaw was found in FreeRDP. A malicious peer, either a server or client, can exploit an out-of-bounds vulnerability during CredSSP/NLA authentication. By supplying a large 'extra count' EC value in a Kerberos GSS Wrap token, an attacker can cause the decryption operation to access memory outside...

CVE-2026-11736 Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality...

CVE-2026-11734 Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable...

EUVD-2026-56191

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable...

CVE-2026-11734

CVE-2026-11734: A buffer overflow in NETGEAR Nighthawk models (MR90, RAX42, MS70, RAX50, RAX43, RAX43v2, RAX41v2, RAX49s, RAX41, RAX42v2, MR70, MS90, RAX50v2) allows an authenticated admin to temporarily disrupt device availability. The current documents only specify the vulnerability and affecte...

CVE-2026-11734 Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable...

CVE-2026-11733

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-73067

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...

Security update for erlang26

This update for erlang26 fixes the following issues: CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. CVE-2026-42789: publickey application accepts non-CA certificates as intermediate issuers and this enables chain forgery bsc1266449. CVE-2026-42790: Name...