Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle July 2026 CPU plus four additional vulnerabilities Critical Patch Update.. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overfl...

CVE-2026-68448

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...

PT-2026-71282

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description Improper Access Control allows a low privileged attacker with local access to achieve Elevation of Privileges and execute arbitrary code. Recommendations...

PT-2026-71062

Name of the Vulnerable Software and Affected Versions FortiWeb versions 8.0.0 through 8.0.2 FortiWeb versions 7.6.0 through 7.6.5 FortiWeb versions 7.4.x FortiWeb versions 7.2.x FortiWeb versions 7.0.x Description An incomplete list of disallowed inputs may allow an attacker to achieve improper...

Linux Distros Unpatched Vulnerability : CVE-2026-20716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an...

PT-2026-71223

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description Improper Access Control allows a low privileged attacker with local access to potentially achieve Elevation of Privileges and execute arbitrary code...

Cisco IOS XE Software Security Hardening Release: August 2026 (cisco-sa-hardening-iosxe-V8NMuMZJ)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review...

CVE-2026-71848 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-66804

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2026-20789

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

CVE-2026-20741

Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

UBUNTU-CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

EUVD-2026-56727

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56595

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56509

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20789

CVE-2026-20789 describes an improper access control vulnerability in Intel(R) PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. The issue could let an unprivileged, unauthenticated local attacker achieve local code execution with no user interaction, via a low...

CVE-2026-20789

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

EUVD-2026-56483

Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20741

Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...