CVE-2026-102036 Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service

An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes...

CVE-2026-102036

An Integer Overflow or Wraparound vulnerability exists in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows a configured EVPN BGP peer to trigger a denial of service (DoS) through EVPN Type-2 MAC/IP routes . No specific exploit details or remediation steps are...

EUVD-2026-101349

An Integer Overflow or Wraparound vulnerability in the routing daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled...

CVE-2026-101945 Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled

An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing...

CVE-2026-101945

An Integer Overflow or Wraparound vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . A remote attacker with an established EVPN BGP peering relationship can exploit this flaw during EVPN BGP route processing to cause a denial of service . This issue specif...

EUVD-2026-101323

An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing...

CVE-2026-101944 Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer...

EUVD-2026-101322

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer...

CVE-2026-101944

Juniper Networks Junos OS and Junos OS Evolved are affected by an Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) . An attacker can cause a denial of service by sending specially crafted EVPN route updates from an accepted EVPN BGP peer . Exploitation details and...

AZL-108198 CVE-2026-53615 affecting package util-linux 2.40.2-6

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-49206

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

EUVD-2026-101292

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-53615

util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...

CVE-2026-49206

The rapidcsv C++ CSV parser library is vulnerable to an integer overflow in the RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames functions. The root cause is the conversion of size_t indexes to int before being added to std::vector iterators. On 64-bit systems, dimensions exce...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2024-43091: Out o...

SUSE-SU-2026:4676-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. - CVE-2024-43091: O...