CVE-2026-63887

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

SUSE CVE-2026-64010

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfcllcprecvcc A race condition exists in the NFC LLCP connection state machine where the connection acceptance packet CC can be processed concurrently with socket release. This can lead to a...

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim behind Bit2Watt , described by three Zhejiang University researchers in a paper accepted to CHES 202...

CVE-2026-64117

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This use-after-free vulnerability arises from incorrect handling of fast-RX rate data during mesh processing. This can lead to memory corruption, which an attacker could potentially exploit to cause a system crash denial of service...

CVE-2026-63853

A flaw was found in the Linux kernel's AMD GPU Video Core Next VCN driver. This vulnerability arises because the VCN encoder and decoder rings, responsible for video processing, do not support 64-bit user fence writes. An attacker could exploit this by submitting command requests that include the...

CVE-2026-63825

A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...

[SECURITY] Fedora 43 Update: python-pillow-11.3.0-10.fc43

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2765)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2745)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the...

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

PT-2026-61949

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists where data packets processed after a channel is closed can trigger channel data callbacks after the associated data has been freed. This can result in system crashes or...

EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-2811)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in...

KLA91166 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebAudio can be exploited remotely to cause denial of...

CVE-2026-33327

libvips is a fast image processing library with low memory needs. The...

AlmaLinux 10 : yggdrasil (ALSA-2026:39573)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39573 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 golang.org/x/net/idna: golang: golang.org/x/net/idn...

GHSA-W7CW-XP7H-6J5J Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET TLS/SSL System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...

GHSA-CVVH-RHRC-WG4Q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing System.Security.Cryptography.Xml, System.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabilit...

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing System.Security.Cryptography.Xml, System.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabilit...

CVE-2026-15900

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...