134174 matches found
RLSA-2026:49214 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to master conntrack CVE-2026-43116 kernel: fanotify: fix false...
PYSEC-2026-3587 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Summary Heap-buffer-overflow READ 16 bytes in Gemm76::adaptgemm76 onnx/versionconverter/adapters/gemm76.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses Bshape1 without checking rank. On Release builds the OOB read ...
CVE-2026-10526
CVE-2026-10526 : The EmbedPress WordPress plugin (pre-4.6.1) does not validate user-supplied URLs before making server-side requests via unauthenticated endpoints, enabling a blind Server-Side Request Forgery (SSRF) that can force the site to issue HTTP requests to internal hosts and services not...
Sharp Network Scanner Tool insecure initial configuration
Overview Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs. With the initial configuration, anyone can upload files unlimitedly without authentication. Initialization of a Resource...
EUVD-2026-52526
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-52522
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-52534
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52532
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-52533
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52527
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-52535
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-52529
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...
EUVD-2026-52524
Buffer over-read in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
EUVD-2026-52505
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...
EUVD-2026-52536
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
EUVD-2026-52530
Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52508
A parser boundary flaw in the Software Bus Network SBN application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via sending a crafted packet...
CVE-2026-66316
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...