CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425 Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

CVE-2026-109425

The Tink-go (tink-crypto/tink-go) library through version 2.8.0 is vulnerable to an input-validation flaw. The functions keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() fail to execute the structural Validate() step before constructing a keyset.Handle. This allows the acceptance of malfor...

CVE-2026-109425

Tink-go tink-crypto/tink-go through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets and ReadWithNoSecrets skip the structural Validate step before constructing a keyset.Handle, allowing malformed public or no-secret keysets that violate Tink's keyset invariant...

EUVD-2026-97815

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

EUVD-2026-97813

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-104364 IBM® Db2® Denial of Service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-104364

IBM Db2 (Server edition) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 across all platforms are vulnerable to a Denial of Service (DoS) attack. The root cause is improper input validation (CWE-20), which could be exploited by a local attacker . To remediate this vulnerability, customer...

Squid-Cache: Squid input validation vulnerability

Squid 3.3.0.1 version to 7.6 before the release was affected by an input validation vulnerability. This vulnerability stems from improper execution of behavioral workflows. The HTTP header parsing src/HttpHeader.cc accepted the raw Transfer-Encoding: identity format. This could allow trusted...

Security Bulletin:Vulnerabilities exists in Parquet package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-73334 DESCRIPTION: Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to...

Security Bulletin:Vulnerabilities exists in Netty package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-59902 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...

Security update for squid

This update for squid fixes the following issues: CVE-2026-32748: denial of service in ICP Request handling bsc1260453. CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. CVE-2026-33526: denial of service in ICP Request handling bsc1260452. CVE-2026-47729: out-of-bounds read...

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21128

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

CVE-2026-21129

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21130

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

EUVD-2026-97196

Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability...

CVE-2026-21132

A vulnerability in Samsung Internet prior to version 30.0.5.24 exists due to improper input validation . This flaw allows remote attackers to perform arbitrary script injection , which requires user interaction to trigger. No specific exploit details or direct links are provided in the documentat...