The Broken System That Keeps Shipping Crews Stranded in the Strait of Hormuz

Vessels are increasingly being abandoned during the war on Iran, revealing a hidden failure in the global systems that keep goods—and people—moving...

CVE-2026-32982

OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads fail, the original Telegram file URLs containing bot tokens are embedded in MediaFetchError strings and leaked to lo...

CVE-2026-30077

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88...

The vulnerability of the dpll_device_get_by_id() function in the drivers/dpll/dpll_core.c module of the DPLL kernel driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-36428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the net/x25 component. When alloc skb fails within the x25 queue rx frame function, the system calls kfree skbskb and returns an error. This error propagate...

The vulnerability of the tze_seq_start() function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature management driver allows a hacker to cause a system failure.

The vulnerability of the tzeseqstart function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature control driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the blkcg_css_online() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the blkcgcssonline function in the block/blk-cgroup.c module, which supports the block-level kernel in Linux, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the tegra241_vcmdq_alloc_smmu_cmdq() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.

The vulnerability of the tegra241vcmdqallocsmmucmdq function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `__cow_file_rangeInline()` function in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-33995

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c can cause a crash in any FreeRDP clients on systems where...

CVE-2026-33987

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistentcachereadentryv3 in libfreerdp/cache/persistent.c, persistent-bmpSize is updated before winpralignedrecalloc. If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This...

UBUNTU-CVE-2026-33984

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resizevbarentry in libfreerdp/codec/clear.c, vBarEntry-size is updated to vBarEntry-count before the winpralignedrecalloc call. If realloc fails, size is inflated while pixels still points to the old,...

UBUNTU-CVE-2026-33986

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuvensurebuffer in libfreerdp/codec/h264.c, h264-width and h264-height are updated before the reallocation loop. If any winpralignedrecalloc call fails, the function returns FALSE but width/height are...

UBUNTU-CVE-2026-33987

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistentcachereadentryv3 in libfreerdp/cache/persistent.c, persistent-bmpSize is updated before winpralignedrecalloc. If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This...

CVE-2026-33995

CVE-2026-33995 describes a double-free vulnerability in FreeRDP’s Kerberos handling (WinPR, kerbors/kerberos.c) affecting pre-3.24.2 builds. Specifically, double-free occurs in kerberos_AcceptSecurityContext() and kerberos_InitializeSecurityContextA() during NLA teardown when Kerberos/U2U is conf...

CVE-2026-33995 FreeRDP: Possible double free in kerberos_AcceptSecurityContext

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c can cause a crash in any FreeRDP clients on systems where...

CVE-2026-33995

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c can cause a crash in any FreeRDP clients on systems where...

CVE-2026-33987

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistentcachereadentryv3 in libfreerdp/cache/persistent.c, persistent-bmpSize is updated before winpralignedrecalloc. If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This...

CVE-2026-33987 FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistentcachereadentryv3 in libfreerdp/cache/persistent.c, persistent-bmpSize is updated before winpralignedrecalloc. If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This...