PT-2026-64729

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

PT-2026-64519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where the nfs open permission mask function fails to include MAY WRITE in the access mask when the O TRUNC flag is used during a file open...

Linux Distros Unpatched Vulnerability : CVE-2026-64298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to truncate a file, so an open that specifies OTRUNC must be authoriz...

PT-2026-64545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UDF filesystem implementation where the udf free blocks function fails to include the extent offset when validating the logical block number and count against the...

PT-2026-64757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool component where the tsconfig prepare data function calls ethnl ops begin but fails to call ethnl ops complete before returning an error. Recommendations At...

GHSA-R277-6W6Q-XMQW kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

Summary ValidationHandler.Load in getkin/kin-openapi silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which always returns nil without performing any credential check. Because this substitution happens unconditionally when the caller omits the field, every OpenAPI security...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the fx operation. An attacker can cause a denial of service by passing a specially crafted argument. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Advisory - GitHu...

GHSA-F5M7-CQGW-8HM7 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel...

ImageMagick: Memory Leak in hough lines operation when an operation fails

When a specific operation fails in the hough lines operation a small memory leak will occur...

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

When transforming an image to the log colorspace a small memory leak happens when the operation fails...

GHSA-VGHG-5JRG-2398 ImageMagick: Policy Bypass in script operation due to missing checks

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...

ImageMagick: Policy Bypass in script operation due to missing checks

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...

EUVD-2026-41112

ImageMagick: Policy Bypass in concatenate operation due to missing checks...

ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

PT-2026-64447

An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel...

EUVD-2026-48308

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

UBUNTU-CVE-2026-13064

Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...

Aggregation Framework Memory Exhaustion Leading to Process Termination

An authenticated user can cause a mongod process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB's aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-56375: possible memory leak in ASHLAR coder when action fails bsc1271495. CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title bsc1271496. CVE-2026-61859: policy bypass in script operation due to missing chec...