...[ More ]

GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. GDCM's command-line tool gdcmxml, which converts between XML and DICOM file formats, is vulnerable to a stack-based buffer overflow ...

About the security content of iOS 26.7.1 and iPadOS 26.7.1

About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Important: gvfs

Issue Overview: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buff...

Medium: runc

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup CVE-2026-52977 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in offloaded map/prog info fill...

Medium: policycoreutils

Issue Overview: A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A...

About the security content of macOS Sequoia 15.8.1

About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper external management of file names or paths. This allows attackers to escalate their privileges.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Important: libvirt

Issue Overview: A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing...

Important: crash

Issue Overview: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in...

ROS-20260928-73-0014

The vulnerability of the kssarnginit function in the drivers/char/hwrandom/ks-sa-rng.c file of the Linux kernel is related to zero-division errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260928-73-0003

The vulnerability of the vmwcmddma function in the drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260928-73-0011

The vulnerability of the copyfromuser function in the arch/sparc/lib/U3memcpy.S file of the Linux operating system’s kernel is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Verifying Graceful Degradation in a Distributed Malware-Detection System with SPIN

Modern endpoint malware detection is distributed: a lightweight agent on each endpoint collects features from a scanned file or process, sends them to a remote server for analysis, and then enforces the returned verdict locally by blocking, quarantining, or disinfecting. Because the endpoint acts...

GAZEleak: Passcode Inference against Eye-Tracking XR Devices through External Observation

Mixed-reality headsets such as Apple Vision Pro replace the touch screen with gaze-as-pointer interaction: the wearer looks at a target and confirms with an air pinch. Because the display is inside the headset and the eye tracker is walled off from third-party software, such input is widely assum...

Input Leap Arbitrary File Write

Input Leap versions through 3.0.3 the final release and master, on Windows and macOS, allow a connected peer to write a file outside the configured drop-target directory...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the “record-output” parameter at the final destination /instances/$name/exec of the Docker control system and the Incus virtual machine manager allows a attacker to execute arbitrary commands.

The vulnerability of the “record-output” parameter at the final destination /instances/$name/exec of the Docker control system and the Incus virtual machine manager is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the Microsoft PowerPoint presentation preparation program lies in its memory usage after it is released, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation program is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260928-73-0056

The vulnerability of the functions hfsfindinit and hfsbrecfind in the fs/hfsplus/bfind.c module, which is part of Apple’s HFS extended file system support in Linux, stems from the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the...