EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

us.fatehi:schemacrawler-examplecode (>=16.15.7, <=16.15.8), us.fatehi:schemacrawler-jdbc-drivers (>=16.15.7, <=16.15.8) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.8)

net.snowflake:snowflake-jdbc MAVEN version 3.13.8 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode =16.15.7, =16.15.7, =16.15.7, =16.15.8 Source cves: CVE-2026-86597...

us.fatehi:schemacrawler-examplecode (>=16.16.4, <=16.16.7), us.fatehi:schemacrawler-jdbc-drivers (>=16.16.4, <=16.16.7) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.12)

net.snowflake:snowflake-jdbc MAVEN version 3.13.12 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode =16.16.4, =16.16.4, =16.16.4, =16.16.7 Source cves: CVE-2026-8659...

us.fatehi:schemacrawler-examplecode (>=16.16.8, <=16.16.9), us.fatehi:schemacrawler-jdbc-drivers (>=16.16.8, <=16.16.9) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.13)

net.snowflake:snowflake-jdbc MAVEN version 3.13.13 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode =16.16.8, =16.16.8, =16.16.8, =16.16.9 Source cves: CVE-2026-8659...

io.rtdi.appcontainer:snowflakerealm (>=0.9.2, <=0.9.3), net.snowflake:snowflake-ingest-sdk (1.1.0-unshaded) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.15)

net.snowflake:snowflake-jdbc MAVEN version 3.13.15 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.rtdi.appcontainer:snowflakerealm =0.9.2, =16.16.12, =16.16.12, =16.16.12, =16.16.14 Source cves:...

com.raw-labs:raw-cli_2.12 (>=0.9.0, <=0.11.0), com.raw-labs:raw-sources-snowflake_2.12 (>=0.9.0, <=0.11.0) +6 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.28)

net.snowflake:snowflake-jdbc MAVEN version 3.13.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.raw-labs:raw-cli2.12 =0.9.0, =0.9.0, =2.0.0, =2.0.0, =16.19.8, =16.19.8, =16.19.8, =16.19.9 Sourc...

us.fatehi:schemacrawler-examplecode (16.19.11), us.fatehi:schemacrawler-jdbc-drivers (16.19.11) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.32)

net.snowflake:snowflake-jdbc MAVEN version 3.13.32 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode 16.19.11 - us.fatehi:schemacrawler-jdbc-drivers 16.19.11 -...

com.datasqrl:sqrl-discovery (0.7.2), com.datasqrl:sqrl-planner (0.7.2) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.0)

net.snowflake:snowflake-jdbc MAVEN version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery 0.7.2 - com.datasqrl:sqrl-planner 0.7.2 -...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.2.0, <=2.4.0), org.finos.legend.engine:legend-engine-xt-persistence-component-relational-snowflake (>=release-4.96.3, <=4.141.0) +5 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.19)

net.snowflake:snowflake-jdbc MAVEN version 3.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.2.0, =release-4.96.3, =4.141.0 -...

com.linkedin.feathr:feathr_2.12 (>=0.1.2, <=1.0.5-rc5), us.fatehi:schemacrawler-examplecode (>=16.16.15, <=16.16.17) +2 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.18)

net.snowflake:snowflake-jdbc MAVEN version 3.13.18 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.feathr:feathr2.12 =0.1.2, =16.16.15, =16.16.15, =16.16.15, =16.16.17 Source cves:...

net.snowflake:spark-snowflake_2.12 (>=2.11.1-spark_3.1, <=2.11.1-spark_3.3), net.snowflake:spark-snowflake_2.13 (>=2.11.1-spark_3.2, <=2.11.1-spark_3.3) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.24)

net.snowflake:snowflake-jdbc MAVEN version 3.13.24 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.12 =2.11.1-spark3.1, =2.11.1-spark3.2, =2.11.1-spark3.3 -...

com.snowflake:snowpark (>=0.9.0, <=0.10.0), us.fatehi:schemacrawler-examplecode (>=16.15.5, <=16.15.6) +2 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.7)

net.snowflake:snowflake-jdbc MAVEN version 3.13.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark =0.9.0, =16.15.5, =16.15.5, =16.15.5, =16.15.6 Source cves: CVE-2026-86597 Sour...

USN-8871-1: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

Dell has uncovered vulnerabilities in container storage modules

Dell has addressed the vulnerabilities in Container Storage Modules version 1.18.0 and later. These vulnerabilities reside in Dell Container Storage Modules CSM, which are used for integrating Dell storage systems with container platforms such as Kubernetes and OpenShift. The identified...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: The ath5k driver appears to perform an array-index-out-of-bounds access, as indicated by the UBSAN kernel message: UBSAN: array-index-out-of-bounds in...

CVE-2026-19185

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19185 Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19185 Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19185

In Zephyr RTOS builds with CONFIG_USERSPACE, a vulnerability exists in the i3c_do_ccc() system call handler within drivers/i3c/i3c_handlers.c. The system-call verifier fails to validate per-target data buffers, allowing an unprivileged user-mode thread with I3C controller access to provide arbitr...

EUVD-2026-92286

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...