PT-2026-29023

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.8 through 11.12.4+541730 WatchGuard Fireware OS versions 12.0 through 12.11.8 WatchGuard Fireware OS versions 2025.1 through 2026.1.2 Description A Cross-Site Request Forgery CSRF issue in the Fireware OS Web...

The vulnerability of the hisi_uncore_target() function in the drivers/devfreq/hisi_uncore_freq.c module of the Linux dynamic frequency and voltage scaling driver software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hisiuncoretarget function in the drivers/devfreq/hisiuncorefreq.c module of the Linux dynamic frequency and voltage scaling driver relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...

The vulnerability of the ieee80211_rx() function in the drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information, thereby violating security protections provided by the Linux operating system’s kernel.

The vulnerability of the ieee80211rx function in the drivers/staging/rtl8192u/ieee80211/ieee80211rx.c module relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the `virtio_crypto_alg_skcipher_close_session()` function in the `drivers/crypto/virtio/virtio_crypto_skcipher_algs.c` driver of the Linux kernel’s cryptographic accelerator allows a hacker to trigger a service failure.

The vulnerability of the virtiocryptoalgskcipherclosesession function in the drivers/crypto/virtio/virtiocryptoskcipheralgs.c driver of the Linux kernel’s cryptographic accelerator is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a servic...

The vulnerability of the miEnumattr() function in the fs/ntfs3/record.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the miEnumattr function in the fs/ntfs3/record.c module of the NTFS file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the admac_terminate_all() function in the drivers/dma/apple-admac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the admacterminateall function in the drivers/dma/apple-admac.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the tmc_etr_get_sysfs_buffer() function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tmcetrgetsysfsbuffer function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the exclude_super_stripes() function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the excludesuperstripes function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

PT-2026-46557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue in the Media component allows a remote attacker who has compromised the renderer process to execute arbitrary code inside a sandbox. This is achieved through the...

PT-2026-46554

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient policy enforcement in Navigation allows a remote attacker to bypass the content security policy CSP, which is a security layer that helps detect and mitigate...

CVE-2026-30561

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

The vulnerability of the __gtp_encapdestroy() function in the drivers/net/gtp.c driver for network devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gtpencapdestroy function in the drivers/net/gtp.c driver for Linux kernel network devices is related to the use of memory after release. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the `legacy_load_cluster_from_disk()` function in the `fs/erofs/zmap.c` file of the EROFS file system, a core component of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the legacyloadclusterfromdisk function in the fs/erofs/zmap.c file of the EROFS file system’s kernel in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the meson_sm_probe() function in the drivers/firmware/meson/meson_sm.c file of the Linux kernel’s firmware driver allows a hacker to cause a system failure.

The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

The vulnerability of the exfat_allocate_bitmap() function in the fs/exfat/balloc.c module of the exFAT file system for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the exfatallocatebitmap function in the fs/exfat/balloc.c file of the exFAT file system in Linux’s operating system is related to the lack of checking for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2026-32979 OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approval

OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when exact file binding cannot occur. Remote attackers can change approved local scripts before execution to achieve...

CVE-2026-4985

A flaw was found in dloebl CGIF, a GIF image handler component. A remote attacker could exploit an integer overflow vulnerability by manipulating the width or height arguments when adding a frame. This could lead to a denial of service DoS, making the affected system or application unavailable...

PT-2026-38103

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description A use after free issue in Views allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. Use after free is a memory corrupti...

CVE-2026-33654

nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module nanobot/channels/email.py, allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions and subsequently, system tools without...