SUSE CVE-2026-55763

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

EUVD-2026-74410

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Linux Btrfs DoS

The vulnerability of the doTraceBtrfsSyncFile function in the include/trace/events/btrfs.h header of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-54048: Server-Side Request Forgery (SSRF)

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

ROS-20260909-73-0168

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

RockyLinux 8 : xmlrpc-c (RLSA-2026:64772)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

CVE-2023-54396: Improper Validation of Array Index

PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions or via commands to trigger undefined offset errors and crash the server...

PT-2026-102373

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description The PyJWS. load function in jwt/api jws.py fails to catch RecursionError when processing a deeply nested token header via json.loads. Because the parser only catches ValueError, the RecursionErr...

ROS-20260909-73-0034

The vulnerability in Chromium is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-87529: Numeric Truncation Error

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87563: Origin Validation Error

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...

Linux dma_buf_fd() Buffer Overflow

The vulnerability of the dmabuffd function in the drivers/dma-buf/dma-buf.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux TLS Protocol Buffer Overflow

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux L2TP Buffer Overflow DoS

The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nftinnerrestoretunctx function in the net/netfilter/nftinner.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel ebtables_init Heap Buffer Overflow DoS

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Microsoft Copilot Studio Graphical Tool Privilege Escalation

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

MiracleLinux 8 : xmlrpc-c-1.51.0-11.el8_10.1 (AXSA:2026-1789:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1789:02 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from t...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the rzv2hivctransferbuffer function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file, a driver for multimedia devices in the Linux operating system, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise...