EUVD-2026-66665

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-68863

Dell PowerProtect One versions 20.1.0.0 and below contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote network access can exploit it with low complexity and no user interaction, resulting in Denial of Service . The CVSS 3.1 score is 7.5 (HIGH) , reflecting ...

CVE-2026-68863

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

EUVD-2026-66212

LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zipextractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploaded...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

CVE-2026-80533

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs during the Allocation Group Information AGI repair process, specifically in the xrepiunlinkwalkondiskbucket function. If the buffer verifier fails, a null pointer dereference can occur when attempting to rebuild...

CVE-2026-80532

A flaw was found in the XFS filesystem's online file system check fsck utility within the Linux kernel. The xrepiunlinkresolvebucket function, responsible for reconstructing unlinked inode lists, is vulnerable to an infinite loop. This can occur due to malformed nextunlinked pointers, potentially...

CVE-2026-80535

A flaw was found in the Linux kernel's XFS filesystem. When a local user or process attempts to delete a directory that refers to itself, the directory tree repair code incorrectly tries to acquire a lock on the same inode twice. This double-locking issue can lead to system instability or...

CVE-2026-80536

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

CVE-2026-80537

A flaw was found in the Linux kernel's XFS filesystem. An off-by-one error in the rtrefcount btree root level validation allows a local attacker to craft a malicious XFS image. When this image is mounted, it can lead to a slab-out-of-bounds write, causing a kernel panic and a denial of service Do...

GHSA-95X5-QVVM-HMFP

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...

CVE-2026-54616

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...

GHSA-MM85-Q63V-4476

creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...

CVE-2026-16599

A flaw was found in wget's FTP OPIE/S-KEY authentication functionality. A malicious FTP server or a network attacker can send a specially crafted OPIE challenge. This challenge contains a sequence number that, when processed by wget, can lead to an excessive number of cryptographic computations...

USN-8683-1 libheif vulnerabilities

Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2026-62289 Ali Firas discovered that libheif...

CVE-2026-79040

A flaw was found in chromium-browser. This uninitialized resource vulnerability in the GPU component allows a remote attacker to read memory outside the application's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, potentially leading to the...

CVE-2026-79112

A flaw was found in Skia, a 2D graphics library, within Google Chrome. This out-of-bounds read vulnerability could be exploited by a remote attacker who has already compromised the browser's renderer process. By presenting a specially crafted HTML page, the attacker could read sensitive memory...

CVE-2026-80531

A flaw was found in the xfs filesystem component of the Linux kernel. This vulnerability is a Use-After-Free UAF issue, which means that the system attempts to use memory after it has been freed, potentially leading to unpredictable behavior. This specific UAF occurs during the creation of...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...

CVE-2026-79239

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...