PT-2026-88842

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...

PT-2026-88916

Name of the Vulnerable Software and Affected Versions bestzip version 2.2.6 bestzip version 3.0.2 Description An argument injection issue exists in the nativeZip function, allowing attackers to inject arbitrary arguments into the Info-ZIP backend. By providing a malicious destination path and...

PT-2026-88808

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-88795

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

The vulnerability of the fbcon_do_set_font() function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside the buffer’s boundaries. Exploiting this vulnerability could allow an attacker t...

PT-2026-88833

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-89094

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree sensitive for derived key buffers crypto krb5 prepare encryption and crypto krb5 prepare checksum free the buffer holding the freshly derived keys with plain kfree, leaving the key material behind in the...

ROS-20260909-73-0125

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

AlmaLinux 10 : thunderbird (ALSA-2026:65159)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:65159 advisory. firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Privilege escalation in the...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to improper boundary removal of critical data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

UBUNTU-CVE-2026-18090

A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image .icns file. The uncompress function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during...

CVE-2026-19780

creationtimestamp| type| source ---|---|--- 2026-09-08 23:07:26+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv25a66bsz2d 2026-09-15 17:13:05+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvl4oyo3xk2p...

CVE-2026-81725

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:09+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-8mpw-7fpc-4gqj...

CVE-2026-73558

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:07+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5...

CVE-2026-76222

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:44+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hmq2-w58f-27jc...

CVE-2026-83609

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:17+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-3px3-54cx-rmw9...

CVE-2026-83608

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:14+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv...

CVE-2026-86996

creationtimestamp| type| source ---|---|--- 2026-09-08 22:32:40+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b...

CVE-2026-84197

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224ku6z62t 2026-09-09 12:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3k3gs4w22y...

CVE-2026-83950

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:29+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review...