EUVD-2025-210690

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-31936

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20760

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

DEBIAN-CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

CVE-2026-73072

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

CVE-2026-73078

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu...

K000162871: PowerDNS DNSdist vulnerability CVE-2026-40211

Security Advisory Description An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3...

CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...

CVE-2026-73075 Vim: Out-of-bounds Access in Popup Opacity Handling

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

CVE-2026-73074 Vim: Heap Buffer Overflow in Text Property Handling

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

CVE-2026-68288

A flaw was found in the Linux kernel's dropmonitor module. This vulnerability allows for information disclosure due to uninitialized padding bytes in the NETDMATTRPAYLOAD attribute. When the packet payload length is not a multiple of four, these uninitialized bytes are leaked to user space. A loc...

CVE-2026-68285

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the LoongArch architecture. When JIT compilation fails for a subprogram, the bpfjitfree function does not properly release the memory allocated for the JIT context offsets array. This oversight leads t...

CVE-2026-68230

A flaw was found in the Linux kernel's media: amlogic-c3 driver. This vulnerability arises from improper validation of automatic white balance AWB and automatic exposure AE configuration parameters. Specifically, the driver does not correctly check the number of zones against the allocated memory...

CVE-2026-68301

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking module. When an HSR slave device is unregistered, the system fails to properly remove synced Virtual Local Area Networks VLANs. This oversight causes the slave device to retain a reference count on these...

CVE-2026-68416

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked...

CVE-2026-68396

A flaw was found in the Linux kernel's SCSI core. A race condition exists when drivers use the scsischeduleeh function, which can prevent the error handler thread from waking up reliably. This occurs because of an unforced memory order between setting the host into error recovery state and counti...

CVE-2026-68391

A flaw was found in the Linux kernel's Bluetooth management component. This vulnerability involves a Use-After-Free UAF condition, a type of memory corruption where the system attempts to use memory after it has been freed. This can occur due to improper handling of hciconn pointers, potentially...

CVE-2026-68203

A flaw was found in the Linux kernel's vivid media driver. This vulnerability involves two cleanup bugs within the vividinit function. Firstly, a reference leak occurs if platformdeviceregister fails, preventing the proper release of device resources. Secondly, an incorrect function call during...

CVE-2026-68153

A flaw was found in the Linux kernel's libceph component. During the process of tearing down a client, the monitor client is stopped before its associated debugfs files are removed. This timing issue allows a concurrent read of the monmap debugfs file to access memory that has already been freed,...

CVE-2026-19146

A flaw was found in Google Chrome on Android, specifically within its Graphics Processing Unit GPU component. A remote attacker, after compromising the browser's renderer process, could exploit an uninitialized memory vulnerability by tricking a user into visiting a specially crafted HTML page...