ECHO-A285-B836-7FDB

Bulletin has no description...

CVE-2026-10207

creationtimestamp| type| source ---|---|--- 2026-07-28 12:01:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpehfd6be23 2026-07-28 15:06:49+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpos4bbbw2d...

CVE-2026-64221

A flaw was found in the spi: ti-qspi component of the Linux kernel. This use-after-free vulnerability occurs when the driver attempts to fall back to PIO mode after a Direct Memory Access DMA setup failure during probe. If the DMA channel pointer is not properly cleared after a buffer allocation...

CVE-2026-14328

creationtimestamp| type| source ---|---|--- 2026-07-28 11:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdiqtrku23...

CVE-2026-64251

A flaw was found in the Linux kernel's power sequencing pwrseq core. A local attacker with access to the debugfs interface could exploit a use-after-free vulnerability in the pwrseqdebugfsseqnext function. This flaw allows the kernel to access memory after it has been freed, which can lead to a...

CVE-2026-13161

creationtimestamp| type| source ---|---|--- 2026-07-28 11:30:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcpxmcwm2j...

CVE-2026-64231

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for...

CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

CVE-2026-64249

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

CVE-2026-64219

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which is a...

CVE-2026-64241

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...

CVE-2026-14170

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-51153

creationtimestamp| type| source ---|---|--- 2026-07-28 08:50:13+00:00| seen| https://gist.github.com/kurokoleung/9fc51b02c85c2f466bf4ea72c62ba343...

CVE-2026-64227

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...

CVE-2026-15012

creationtimestamp| type| source ---|---|--- 2026-07-28 08:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozfdydns2s...

CVE-2026-15671

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to generic SQL Injection via the 'id' parameter in all versions up to, and including, 3.9.7 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2026-66713

creationtimestamp| type| source ---|---|--- 2026-07-28 06:31:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrorynq4x226 2026-07-28 18:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrpyp2dzzl2z...

BELL-CVE-2026-64354

Bulletin has no description...

CVE-2026-64776

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:22+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:10+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:11+00:00| seen|...