CVE-2026-74704

A flaw was found in the Linux kernel. The schcake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, caus...

CVE-2026-78186

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-74692

CVE-2026-74692 is a TOCTOU race condition in the Linux kernel's net/smc subsystem. The function smc_listen_out() reads sk_state without holding the listener lock, then acquires lock_sock_nested() only after the check passes. This window allows smc_close_active() to transition the listener to SMC_...

Linux Distros Unpatched Vulnerability : CVE-2026-74692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix TOCTOU race between smclistenout and listener close smclistenout reads lsmc-sk.skstate without the listener lock, then acquires locksocknested only...

CVE-2026-19446 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-18828

CVE-2026-18828 is a CWE-787 out-of-bounds write in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1, rated CVSS 5.4 (Medium) with adjacent network vector. IBM provides APARs IJ59566–IJ59563 and VIOS Fix Packs 4.1.0.50/4.1.1.30/4.1.2.20 as remediation; no workarounds are listed. No exploitation in the wild is...

CVE-2026-18716

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain an out-of-bounds read exploitable by a remote authenticated attacker, enabling sensitive data exposure or denial of service. CVSS 7.9 (High). No patch or workaround details are provided in the documents; see IBM's support page for updates.

CVE-2026-63495

Libevent (event notification library) versions 2.2.0-alpha-dev through 2.2.2-alpha contain an unbounded memory accumulation vulnerability in its WebSocket server (ws.c). The evws->incomplete_frames buffer accumulates fragmented frames without enforcing a total message-size limit. An unauthenti...

CVE-2026-63495 Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incompleteframes without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

CVE-2026-55192

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can provide a specially crafted H.264 video stream that causes the client's H.264 decoder to read beyond its allocated memory. This out-of-bounds read can lead to the disclosure of sensitive client memory or cause the...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

PT-2026-79097

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incomplete frames without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

CVE-2026-72351

A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE implementation. A remote attacker could exploit a missing length validation for the remote checksum offload REMCSUM private option. By sending a specially crafted GUE packet, an attacker can cause the kernel to read beyond the...

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

EUVD-2026-62344

When building the iovec array for a received TLS 1.2 CBC record, ktlsocftlscbcdecrypt incremented the iovec index for every mbuf in the chain, including mbufs that were skipped because they contained only TLS header bytes. This left uninitialized entries in the iovec array. The iovec array was...

CVE-2026-49423

In FreeBSD's KTLS receive path, ktls_ocf_tls_cbc_decrypt() incremented the iovec index for every mbuf, including skipped header-only ones, leaving uninitialized entries that caused a kernel panic during HMAC computation. A remote TLS peer controlling TCP segmentation triggers this. Workaround: se...

Microsoft Visual Studio Products (August 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 - Unchecked input for loop condition in .NET allows an unauthorized...