Libxml2 Heap Buffer Overflow DoS

The vulnerability of the xmlMemStrdup function in the Libxml2 library is related to pointer manipulation errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

USButils list.h DoS

The vulnerability of the list.h component of the USButils utility is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Astra Modules parsec_sock_opt_del Buffer Overflow DoS

The vulnerability of the parsecsockoptdel function in Linux Astra Modules is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Libxml2 Heap Buffer Overflow DoS

The vulnerability of the xmlStringGetNodeList function in the tree.c component of the Libxml2 library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Audit extract_timestamp function DoS

The vulnerability of the extracttimestamp function in the Linux Audit storage and record-searching tool is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

PARSEC security subsystem Type Conversion DoS

The vulnerability of the PARSEC security subsystem is related to type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

BPF Libbpf Pointer Dereferencing DoS

The vulnerability of the BPF Libbpf loader library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-37111

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.44 Traefik versions prior to 3.6.15 Traefik versions prior to 3.7.0-rc.3 Description An information disclosure issue exists in the errors custom error pages middleware. When a backend returns a response matching...

EEF-CVE-2026-39805 CL.CL HTTP request smuggling via duplicate Content-Length in bandit

Summary Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':get\content\length/1 in lib/bandit/headers.ex uses List.keyfind/3, which returns only the first matching header. When a...

PT-2026-36367

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Resource leaks occur in the gpiochip add data with key function. Due to gdev-dev.release being unset, the reference count to gdev-dev is not dropped during error handling paths...

CVE-2026-37554

An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing pipeline where OpenSSL exceptions from ECC point validation invalid compressed point, point not on curve are not...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bpf backtrace not handling atomic fetch operations correctly, which could lead to path pruning errors...

SUSE CVE-2026-7320

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1...

Google Chrome MHTML Disclosure

The vulnerability of the MHTML component in Google Chrome relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1606)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1606 advisory. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to...

Important: Red Hat Security Advisory: ovn23.06 security update

An update for ovn23.06 is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Linux RCU Barrier DoS

The vulnerability of the rcubarrier function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

PDF document viewing program Code Execution

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrar...

Beyond Code Reasoning: A Specification-Anchored Audit Framework for Expert-Augmented Security Verification

Security-critical software is routinely audited by tools that reason about vulnerabilities as repository-local code patterns. Yet specification-governed systems -- protocol stacks, consensus implementations, cryptographic libraries -- are constrained by invariants and correctness conditions defin...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the raidcomponentadd function in the drivers/scsi/raidclass.c module of the Linux SCSI device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...