CVE-2026-47588

A flaw was found in the NVIDIA GPU display driver for Linux. A local unprivileged user can trigger a use-after-free condition, where the driver references memory after it has been freed, by issuing a specific sequence of driver commands. Successful exploitation could allow an attacker to achieve...

CVE-2026-47569

A flaw was found in the NVIDIA GPU display driver. A local user can trigger a race condition during handle recycling in the kernel mode layer, resulting in a type confusion condition where memory of one type is misinterpreted as another. A successful exploit could allow an attacker to achieve...

CVE-2026-47556

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial ...

CVE-2026-47551

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges,...

CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access...

CVE-2026-47597

A flaw was found in the NVIDIA GPU Display Driver. An unprivileged local user can exploit a missing self-reference check during map cleanup in the open-source kernel module Resource Server, causing a use-after-free condition where released memory is improperly accessed. Successful exploitation...

CVE-2026-47589

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger a use-after-free condition, where memory is improperly accessed after being released, by issuing a specific sequence of driver commands. Successful exploitation could allow the attacker to execute...

CVE-2026-47587

A flaw was found in nvidia-driver. A local unprivileged user can trigger a use-after-free condition in the NVIDIA GPU Display Driver for Linux, allowing them to execute arbitrary code or escalate privileges on the system. Successful exploitation could also result in a Denial of Service DoS,...

CVE-2026-47514

A flaw was found in nvidia-driver. A local user can trigger an issue in the driver's kernel mode layer that exposes sensitive kernel stack contents, including return addresses and memory pointers. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privilege...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

CVE-2026-93125

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability occurs because the verifier does not correctly handle certain buffer size arguments, allowing values larger than a 32-bit integer. When these oversized values are processed, they are truncated, leading ...

CVE-2026-93144

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The checkptrtobtfaccess function, which is responsible for validating memory access through BPF Type Format BTF pointers, incorrectly allowed certain program-type callbacks to bypass the intended read-only policy for...

CVE-2026-93112

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. The bpfcpumaskpopulate function incorrectly allows writing to a read-only memory region by accepting borrowed cpumask pointers as writable destinations. This could allow a local attacker to cause a denial of service or...

CVE-2026-102490 Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

Zammad packages built with packager.io DEB and RPM could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owne...

EUVD-2026-90081

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...

CVE-2026-102490

All versions of Zammad , including the latest alpha, are vulnerable to a local privilege escalation (LPE) flaw. This vulnerability allows a local zammad user to escalate their privileges to root on the system where Zammad is running. The issue has been identified as actively exploited in the wild...

CVE-2026-102490 Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

Zammad packages built with packager.io DEB and RPM could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owne...

DEBIAN-CVE-2026-47598

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...

DEBIAN-CVE-2026-47599

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-47598

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...