CVE-2026-73282

OpenSSH CVE-2026-73282 affects OpenSSH prior to 10.5. The issue is a use-after-free in realloc data that can occur when a specific pair of remote-forwarding operations are concurrent. The CVSS vector indicates network attack with high complexity and no privileges required, but exploitation status...

CVE-2026-62880

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:54+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:19:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:51+00:00| seen|...

CVE-2026-62776

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:32+00:00| seen|...

CVE-2026-68803

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:04+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:00+00:00| seen|...

CVE-2026-73228

Django REST Framework before 3.17.2 parses request.data in rest_framework/request.py Request._parse by passing the HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies, bypassing DATA_UPLOAD_MAX_MEMORY_SIZE. This can allow oversized req...

CVE-2026-73228 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in restframework/request.py Request.parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies...

CVE-2026-73228 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in restframework/request.py Request.parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies...

CVE-2026-73228 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in restframework/request.py Request.parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies...

CVE-2026-73228

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in restframework/request.py Request.parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies...

Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server...

CVE-2026-18711

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server...

EUVD-2026-56884

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server...

CVE-2026-18711 Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against time-series collections. This could result in a server...

CVE-2026-18711

The CVE-2026-18711 entry concerns MongoDB Server's query execution engine. It describes a use-after-free condition triggered by certain queries against time-series collections, where an authenticated user with read and write privileges can cause an internal reference to be used after memory has b...

CVE-2026-68172

A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68218

A flaw was found in the dm1105 PCI driver of the Linux kernel. This issue arises from the driver's failure to properly deallocate resources, specifically a workqueue, when the device is removed. This oversight can lead to a memory leak, which a local attacker could potentially exploit to cause a...

CVE-2026-68164

A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. The damonsetregions function, responsible for setting memory monitoring regions, incorrectly processes unsorted or overlapping input ranges due to a missing validation check. This can lead to unexpected behavior in DAMON...

CVE-2026-68274

A flaw was found in the Linux kernel's drm/xe/guc component. An incorrect calculation of the steered register list allocation size can lead to a buffer overflow. This allows an attacker to write past the allocated buffer, corrupting adjacent memory objects. This memory corruption can result in...

CVE-2026-68256

A flaw was found in the drm/amd/display component of the Linux kernel. This issue occurs in the detectlinkandlocalsink function, where a prevsink reference is not properly released if the DisplayPort DP alt mode timeout path returns false. This missing cleanup can lead to a memory leak, potential...