The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-12999

CVE-2026-12999 affects the Infineon Airoc Wi-Fi driver in Zephyr RTOS (drivers/wifi/infineon/airoc_wifi.c). The transmit callback airoc_mgmt_send() leaks a net_buf from the fixed airoc_pool (default 20 buffers) whenever whd_network_send_ethernet_data() returns a synchronous failure, because the b...

CVE-2026-74728

In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput path which calls virttofolioNULL, dereferencing an invalid address and...

CVE-2026-74706

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceuninit, which eventually invokes bngeauxdevrelease. The release callback...

CVE-2026-74626

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

CVE-2026-74728

CVE-2026-74728 is a NULL pointer dereference in the Linux kernel's XFS filesystem repair tooling. When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is called with bp->b_addr still NULL. The code then falls through to the folio_put path, which calls virt_to_folio(NULL), dereferencing an in...

CVE-2026-74728 xfs: handle NULL b_addr in xfs_buf_free

In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput path which calls virttofolioNULL, dereferencing an invalid address and...

CVE-2026-74706

CVE-2026-74706 is a NULL pointer dereference in the Linux kernel's bnge (Broadcom NetXtreme-E) network driver. When allocation of auxr_dev fails during auxiliary device setup, the error path invokes bnge_aux_dev_release(), which unconditionally dereferences aux_priv->auxr_dev->pdev. Since a...

CVE-2026-74678 net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179178a: fix skb leak in ax88179txfixup When the interface has NETIFFSG enabled and skblinearize fails in ax88179txfixup, the function returns NULL without freeing the skb. usbnetstartxmit treats a NULL return from...

EUVD-2026-64563

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

CVE-2026-74626

CVE-2026-74626 affects the NTB (Non-Transparent Bridge) network device driver in the Linux kernel. The root cause is in ntb_netdev_rx_handler(), which hands the received skb to the network stack before allocating its replacement. If the allocation fails, no buffer is reposted, so each failure per...

CVE-2026-74626 NTB: ntb_netdev: Preserve RX queue depth on allocation failure

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

CVE-2026-63311

NLTK (Python NLP library) versions

PT-2026-79631

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb netdev: Preserve RX queue depth on allocation failure ntb netdev rx handler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure...

PT-2026-79711

In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr dev fails during auxiliary device setup, the error path calls auxiliary device uninit, which eventually invokes bnge aux dev release. The release...

CVE-2026-50288

CVE-2026-50288 affects @asymmetric-effort/specifyjs , a declarative TypeScript UI framework, prior to version 0.2.136 . The vulnerability resides in the assertSecureUrl function (core/src/shared/secure-fetch.ts:42-45). When new URL() throws a parse error, the catch block silently returned instead...

CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now...

CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now...

CVE-2026-70452

A flaw was found in rsync. This vulnerability allows a remote attacker to bypass hostname-based access control rules. By inducing DNS resolution failures, the rsync daemon incorrectly skips deny rules, granting unauthorized access to restricted module file trees. Mitigation To mitigate this issue...