CVE-2026-31546

creationtimestamp| type| source ---|---|--- 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-07-09 01:16:30+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-27960

creationtimestamp| type| source ---|---|--- 2026-05-05 19:19:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vpud3o42r 2026-05-05 19:21:58+00:00| seen| https://bsky.app/profile/potato.software/post/3ml4vuza7cx2l 2026-05-05 21:58:42+00:00| seen|...

CVE-2026-42578

creationtimestamp| type| source ---|---|--- 2026-05-05 18:05:31+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr...

Malicious code in @bold-commerce/stacks-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc580455dc6abd5d1a25634543e82bc51cf855c3494024397eb17d4c7fc1eff The package @bold-commerce/stacks-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3339 Malicious code in nf-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d1fc3aadbb204f6da1c0db37a6e1b540bdcc3964bd033d5657a067d7e246cc The package nf-ui-components was found to contain malicious code. Source: ghsa-malware 4ab8cac0b0cae1864121f4fd7223e6cb7bb0168d113ece4974f94aae4e2418...

CVE-2026-3359

creationtimestamp| type| source ---|---|--- 2026-05-05 10:36:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml3yjbghkb27 2026-05-05 11:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml422qsgql2c 2026-05-05 19:10:55+00:00| seen|...

CVE-2026-7776

creationtimestamp| type| source ---|---|--- 2026-05-04 22:49:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2qzjvh2626 2026-05-04 23:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2rxo7cyx2p 2026-05-05 02:09:50+00:00| seen|...

CVE-2026-44429

creationtimestamp| type| source ---|---|--- 2026-05-04 14:34:31+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-rqv2-m695-f8j4...

CVE-2026-7482

creationtimestamp| type| source ---|---|--- 2026-05-04 14:15:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzuc7suqr2k 2026-05-04 14:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzwkpa3ak2k 2026-05-04 21:09:36+00:00| seen|...

MAL-2026-3279 Malicious code in muenxo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48537a437deee473614e25a26caa3436391ae5a590cd8fbd2e8d8b5ec61bec60 The package muenxo was found to contain malicious code. Source: ghsa-malware ffae9a8a617618fdf06b6c2a547167397aa849264407477c10f3490d494beb01 Any...

CVE-2026-7372

creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwbcqjd2w 2026-05-04 01:20:05+00:00| seen| https://bsky.app/profile/potato.software/post/3mkyixk7tez2l 2026-05-04 01:20:05+00:00| seen|...

MAL-2026-3265 Malicious code in @bcs-bank/common-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c84c16934aaaeda86ed317c33795f796252ac98aaf9f39208575837332b372 The package @bcs-bank/common-constants was found to contain malicious code. Source: ghsa-malware...

Android Security Bulletin—May 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-05-01 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

Android XR Bulletin—May 2026Stay organized with collectionsSave and categorize content based on your preferences.

The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-05-05 or later from the May 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to accep...

Android Automotive OS Update Bulletin—May 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2026-05-05 or later from the May 2026 Android Security Bulletin in addition to all issues in this...

Wear OS Security Bulletin—May 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2026-05-05 or later from the May 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...

CVE-2026-31719

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5enc - fix async decrypt skipping hash verification krb5encdispatchdecrypt sets req-base.complete as the skcipher callback, which is the caller's own completion handler. When the skcipher completes asynchronously, this...

CVE-2026-42779

creationtimestamp| type| source ---|---|--- 2026-05-01 12:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mks65q3xcz2i 2026-05-01 13:10:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mks7bkcvh72o 2026-05-02 15:00:06+00:00| seen|...

ALPINE-CVE-2026-31787

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace does a partial munmap on a privcmd mapping, the kernel splits the VMA via splitvma. Since...

CVE-2026-31787 xen/privcmd: fix double free via VMA splitting

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace does a partial munmap on a privcmd mapping, the kernel splits the VMA via splitvma. Since...