PT-2026-83337

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...

PT-2026-83290

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-77037: Uncontrolled Resource Consumption

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer's disk storage engine removes the visible file but does not close the underlying write file descriptor, leaving a delete...

PT-2026-83020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the iomap component when the iomap split ioend function splits bios that already originate from the iomap ioend bioset. This happens when the bioset is exhausted,...

The vulnerability of the uvc_start_streaming_video() function in the drivers/media/usb/uvc/uvc_queue.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rpcrdma_post_recvs() function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect resource initialization. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to incomplete cleaning of temporary or auxiliary resources, allows attackers to disclose protected information.

The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise lies in incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the udev component of the Systemd initialization and service management subsystem, which allows a hacker to trigger a system failure.

The vulnerability of the udev component of the Systemd service management subsystem is related to improper resource movement between different areas. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Codecs component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Codecs component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the io_uring/kbuf.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Util-linux command-line utility suite relates to insufficient checking of the status of shared resources, which allows a perpetrator to trigger a service failure.

The vulnerability of the Util-linux command-line utility package relates to insufficient checking of the status of shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-42391: Uncontrolled Resource Consumption

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-27852: Uncontrolled Resource Consumption

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...

CVE-2026-55247: Uncontrolled Resource Consumption

plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...

ROS-20260828-73-0023

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-activeresource (UTSA-2026-093008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093008 advisory. There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an...

CVE-2026-33605: Uncontrolled Resource Consumption

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-5115)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Jetty Vulnerability Details CVEID:CVE-2025-5115 DESCRIPTION: In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send...

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses WebSphere Application Server Liberty which is vulnerable to CVE-2026-5516, CVE-2026-4410. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-5516 DESCRIPTION: IBM WebSphere Application...