Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

The vulnerability of Microsoft Edge’s browser on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge’s browser on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Edge’s browser on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge’s browser on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability of Microsoft Edge’s browser on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge’s browser on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability of the Microsoft Partner Center software, related to errors in processing hypertext links, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Partner Center software is related to errors in processing hypertext links. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems, related to access control errors, allows attackers to perform spearishing attacks.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems is related to access control errors. Exploiting this vulnerability could allow attackers to carry out spear-phishing attacks...

GitLab 16.0 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-1322)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Business Logic Errors in GitLab CVE-2026-1322 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Native WiFi Miniport Driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Native WiFi Miniport Driver for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems affects synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2026-42871

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiardocfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the...

Moderate: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

F5 NGINX Plus和F5 NGINX Open Source 资源管理错误漏洞

F5 NGINX Plus and F5 NGINX Open Source are both products of the American company F5. F5 NGINX Plus is a software-based application delivery platform. F5 NGINX Open Source is a high-performance web server, reverse proxy server, load balancer, and API gateway. Both F5 NGINX Plus and F5 NGINX Open...

The vulnerability of the Win32K component – GRFX in Windows operating systems – allows attackers to enhance their privileges.

The vulnerability of the Win32K component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a malicious user to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

PT-2026-61471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the a6xx gpu init function within the drm/msm/adreno component. The node variable is obtained via of parse phandle, but certain early error return paths bypass...

The vulnerability of the Cisco IoT Field Network Director software interface allows a intruder to trigger a service failure.

The vulnerability of the Cisco IoT Field Network Director software interface is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the xHCI controller failing to clear interrupts when reporting host controller errors, potentiall...