CVE-2026-47599

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-47599

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-47599

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

SUSE CVE-2026-98131

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmactsoxmit In stmmactsoxmit, if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before t...

PT-2026-103586

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.18.1 Description A crafted PDF file can contain unusually large source-code or destination-string tokens within a font /ToUnicode mapping. This causes the parse bfchar function in pypdf/ cmap.py to decode and retain...

PT-2026-103447

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the open-source kernel module that allows an unprivileged local user to cause improper preservation of memory access permissions during DMA Direct...

CVE-2026-47599: Improper Preservation of Permissions

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might lead to code execution, escalation of...

CVE-2026-102995: Uncontrolled Resource Consumption

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/cmap.py parsebfchar to decode and retain oversized values during operations such as text extractio...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

CVE-2026-97564

A flaw was found in the Linux kernel's SMB Server Message Block client. This vulnerability allows a local user to achieve privilege escalation due to missing validation on identity mapping key descriptions. Because the kernel does not verify that identity mapping requests originate internally, a...

PT-2026-102804

Name of the Vulnerable Software and Affected Versions pageant versions prior to 0.2.3 Description The MemoryMap::read function in the pageant/src/wmmessage.rs file trusts a peer-controlled u32 response length provided via the 8192-byte shared-memory mapping accessed by AgentClient::connect pagean...

CVE-2026-97548

A flaw was found in the Linux kernel's XFS file system. A local user can cause a Denial of Service DoS or system crash through an out-of-bounds memory access when processing large real-time reverse-mapping or reference count data structures. The issue occurs because the size calculation for...

CVE-2026-98144

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local user could cause a denial of service DoS by triggering a resource leak during command error handling. By manipulating buffer handles and importing an unmappable memory buffer object BO, an attacker can cause buffer mappin...

CVE-2026-98140

A flaw was found in the Linux kernel's NTFS file system. A local user could trigger this vulnerability during error handling in Master File Table MFT write operations, where temporary kernel memory mappings fail to be released properly. Because these local memory mappings require strict ordering,...

CVE-2026-98131

A flaw was found in the Linux kernel's stmmac network driver. During network packet transmission, a failure in Direct Memory Access DMA mapping for packet fragments causes the driver to drop the packet without releasing previously allocated mappings. A local user could exploit this flaw by...

CVE-2026-93785

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. An integer truncation issue in the identity mapping key handler allows a local user to supply an oversized key payload that exceeds the maximum supported length limit. This size discrepancy causes subsequent...

CVE-2026-100686 Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...

CVE-2026-100686 Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...

CVE-2026-100686 Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...

PT-2026-99357

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description Insufficient per-app authorization validation in the 'POST /api/global/groups/:groupId/apps' endpoint allows users with builder privileges to assign application roles across workspace boundaries. A...