CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics component

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

EUVD-2026-60598

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

CVE-2026-75834 Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte

Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...

CVE-2026-72387

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability, located in the groupprocesstileroom function, occurs when error pointers are improperly handled, leading to an invalid memory dereference. A local attacker could potentially exploit this flaw to cause a system...

PT-2026-76980

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird ESR versions prior to 153.1 Description Privilege escalation is possible due to an invalid pointer within the Graphics component...

Amazon Linux 2023 : docker (ALAS2023-2026-2062)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2062 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-139 (ALASDOCKER-2026-139)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-139 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err()

A flaw was found in the Linux kernel’s SLUB memory allocator mm/slub. The function objecterr — used for debugging object metadata freelist pointer, redzone, etc. — can access invalid pointers when reporting corruption, leading to a crash. In some cases, due to freelist corruption e.g., detected b...

CVE-2026-72445

A flaw was found in the Linux kernel's ALSA USB audio driver for QCOM devices. An attacker, by providing an invalid service interval during stream enablement, can cause the audio substream to become unresponsive. This can lead to a Denial of Service DoS for the affected audio device, requiring a...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2063 --releasever 2023.12.202608...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

clamav: Fix of 6 CVEs

CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds...

CVE-2026-74468 gpio: pch: use raw_spinlock_t for the register lock

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

CVE-2026-74321

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in btrfsrundelayedrefs In the beginning of the loop, we try to obtain a locked delayed ref head, if 'lockedref' is currently NULL, by calling btrfsselectrefhead, which can return an error...

CVE-2026-72387

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix potential invalid pointer deref in groupprocesstileroom If heaps is an ERRPTR, panthorheappoolput will deref an invalid pointer. Make sure we set it to NULL in that case...