Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004112 advisory. In tungetuser of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001514 advisory. In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004180 advisory. In doiptgetctl and doiptsetctl of iptables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001367 advisory. In pfkeydump of afkey.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004136 advisory. In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege wit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004324 advisory. In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004157 advisory. In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privilege...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004204 advisory. In xfrm6tunnelfreespi of net/ipv6/xfrm6tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004034 advisory. In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004772 advisory. In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004636 advisory. In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001282 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004348 advisory. In binderthreadrelease of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional...

CVE-2026-1009

A stored cross-site scripting XSS vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content. An authenticated attacker can inject arbitrary JavaScript into forum posts, which is stored and executed when other users view the affected post...

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36911

CVE-2025-36911 (WhisperPair) is a vulnerability in Google Fast Pair where devices may accept Key-Based Pairing requests even when not in pairing mode, enabling unauthorized pairing without user interaction. Connected tooling demonstrates practical exploitation: an attacker can obtain a BR/EDR add...

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation

A flaw was found in MariaDB. This vulnerability allows remote attackers to execute arbitrary code on affected installations via improper validation of a user-supplied path prior to using it in file operations in the mariadb-dump utility, requiring user interaction...

EUVD-2026-2665

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...