GHSA-66R2-5GWJ-GXM2 SurrealDB: Writes in a PERMISSIONS clause bypass table permissions

A PERMISSIONS ... WHERE clause is evaluated with permission enforcement disabled, so it can't recurse into its own checks. But the clause could also contain data-modifying statements, and these ran with enforcement still off — so evaluating a permission check could write to tables the caller cann...

CVE-2026-79675 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

CVE-2026-80871

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...

CVE-2026-80895

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...

CVE-2026-80765

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

MINI-859F-PVHQ-W583

Bulletin has no description...

CVE-2026-79116 vulnerabilities

Vulnerabilities for packages: chromium...

serial: amba-pl011: synchronize DMA teardown

...

Linux Distros Unpatched Vulnerability : CVE-2026-80862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in...

CVE-2026-72803

creationtimestamp| type| source ---|---|--- 2026-09-03 23:31:29+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:00:27+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:35:10+00:00| published-proof-of-concept|...

The vulnerability of the msm_ioctl_gem_info_get_metadata() function in the drivers/gpu/drm/msm/msm_drv.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmioctlgeminfogetmetadata function in the drivers/gpu/drm/msm/msmdrv.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

MINI-VW94-66PH-J55X

Bulletin has no description...

MINI-8FHH-HGFV-VH9J

Bulletin has no description...

SUSE CVE-2026-72372

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock exclusively. This also requires to cell to be removed from net-cellsdynino i...

MINI-XFX6-7VFC-2GPH

Bulletin has no description...

SUSE CVE-2026-84134

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

SUSE CVE-2026-84135

Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155...

SUSE CVE-2026-84136

Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. CVE-2026-84135 Note that Nessus relies on the presence of the package as...