CVE-2026-81644

CVE-2026-81644 is a Denial of Service vulnerability in the preview service module , with impact limited to availability . The CVSS 3.1 score is 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, indicating a network-reachable, low-complexity attack that requires user interaction and no...

CVE-2026-49312

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-74598

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49312

CVE-2026-49312 is a permission control vulnerability in the window module of Huawei consumer devices, as indicated by the September 2026 security bulletins for both desktops and laptops. Successful exploitation may affect service confidentiality . The assigned CVSS 3.1 score is 4.0 (MEDIUM) with ...

CVE-2026-49312

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49310

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49310

CVE-2026-49310 is a permission control vulnerability in the event notification module affecting Huawei consumer devices , including phones, Vision, wearables, and laptops (per the September 2026 security bulletins). Successful exploitation may affect service confidentiality . The CVSS 3.1 score i...

EUVD-2026-74597

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-74596

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49314

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49314

CVE-2026-49314 is an out-of-bounds (OOB) write vulnerability in the rendering and composition module of a Huawei consumer product, as indicated by the vendor support bulletin references (including a laptop-specific bulletin). The vulnerability is rated CVSS 7.3 (HIGH) with a local attack vector r...

CVE-2026-49311

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49311

CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...

EUVD-2026-74595

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49311

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

kernel: zram: fix use-after-free in zram_bvec_write_partial()

A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...

Malicious code in express-session-timer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f [email protected] schedules an unconditional destructive routine at module load time. Approximately 18 seconds after...

MAL-2026-16065 Malicious code in express-session-timer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f [email protected] schedules an unconditional destructive routine at module load time. Approximately 18 seconds after...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

SUSE CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...