kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

CVE-2026-77998

creationtimestamp| type| source ---|---|--- 2026-08-25 14:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvyktwh6j2e 2026-08-25 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwseygqut2e 2026-08-28 16:00:06+00:00| published-proof-of-concept|...

CVE-2026-79673

creationtimestamp| type| source ---|---|--- 2026-08-25 12:26:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2l4j6g7r63ht2...

CVE-2026-78570

creationtimestamp| type| source ---|---|--- 2026-08-25 10:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117155680980822160 2026-08-25 10:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y 2026-08-25 12:07:27+00:00| seen|...

CVE-2026-77138

creationtimestamp| type| source ---|---|--- 2026-08-25 10:07:34+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4rgpwy2e 2026-08-25 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtwohsi5i72p...

CVE-2026-66882

creationtimestamp| type| source ---|---|--- 2026-08-25 09:14:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvi65yggp2t...

CVE-2026-63587

creationtimestamp| type| source ---|---|--- 2026-08-25 08:55:44+00:00| seen| https://infosec.exchange/users/certvde/statuses/117155308741154477 2026-08-25 08:55:50+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mtvh4etatnk2...

CVE-2026-74665

creationtimestamp| type| source ---|---|--- 2026-08-25 07:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvb7ejpjx25...

CVE-2026-78207

creationtimestamp| type| source ---|---|--- 2026-08-25 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv2irmr2t25...

CVE-2026-72699

creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsahuik2j 2026-08-25 04:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzs3rtg2p...

CVE-2026-56707

creationtimestamp| type| source ---|---|--- 2026-08-25 02:25:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mturc5bqhs2j...

CVE-2026-32563

creationtimestamp| type| source ---|---|--- 2026-08-24 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugf4e7rx2f 2026-08-25 00:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtujmjmv5w2f 2026-08-25 09:00:04+00:00| published-proof-of-concept|...

CVE-2026-78267

creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...

CVE-2026-19843

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-09-07 15:18:37+00:00| seen|...

CVE-2026-39975

creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-71509

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

EUVD-2026-65082

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...