USN-8678-3: OpenSSL vulnerability

USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...

CVE-2026-80695

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...

CVE-2026-80643

A flaw was found in the Linux kernel's EDAC/igen6 driver. When this driver is unloaded, a missing 'release' function for memory controller devices can lead to a system call trace. This issue indicates a system error and could potentially result in system instability or a denial of service DoS...

CVE-2026-79775

A flaw was found in rclone. The archive backend's SquashFS parser fails to validate attacker-controlled superblock and metadata values before use. An attacker who can place or modify a malicious SquashFS image in storage exposed through an rclone :archive: remote can trigger multiple...

CVE-2026-80590

A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

MS16-032

MS16-032CVE-2016-0099 SERVICE 전용 이 익스플로잇은 SERVICE에서만 사용할 수 있습니다 논리적 익스플로잇을 수행하며, 논리적 익스플로잇을 대상으로 합니다...

RLSA-2026:61259 Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Servic...

php security, bug fix, and enhancement update

An update is available for php. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...

USN-8699-1 libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

USN-8699-1: libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

CVE-2024-11467

CVE-2024-11467 macOSオペレーティングシステムは、XPCサービスを使用して、XPCサービスデーモンとサードパーティ製アプリケーションの特権ヘルパーツールなど、さまざまなプロセス間の基本的なプロセス間通信を行います。VMware Horizon Clientは、インストール時に、/Library/PrivilegedHelperTools/ ディレクトリの下に com.vmware.horizon.CDSHelper 特権ヘルパーを登録します。 また、com.vmware.horizon.CDSHelper...

CVE-2026-80632

A flaw was found in the Linux kernel's Wi-Fi driver, specifically within the mt7996 component. When the MT76NPU and CONFIGNETMEDIATEKSOCWED configurations are enabled and the Airoha NPU System-on-Chip SoC is detected, the mt7996inittxqueues function can attempt to dereference a NULL Wi-Fi/Etherne...

CVE-2026-80614

A flaw was found in the Linux kernel's emac network driver. An early interrupt in the emacirq handler can occur before the dev-emacp pointer is properly initialized. This can lead to a NULL pointer dereference, causing the system to crash and resulting in a Denial of Service DoS...

CVE-2026-65918

A flaw was found in torchvision, a library for PyTorch. This vulnerability, an out-of-bounds heap read in the GIF decoder, allows a remote attacker to supply specially crafted or truncated GIF files. Successful exploitation can lead to a denial of service, causing the application to crash, or the...

CVE-2026-80635

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability occurs because the driver does not adequately validate the length of certain firmware responses. An attacker could potentially craft a malicious firmware response, leading to an out-of-bounds read of stale heap data...

CVE-2026-48988

A flaw was found in markdown-it, a Markdown parser. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS when the typographer option is enabled. This occurs due to inefficient processing of smartquotes, leading to excessive CPU consumption when parsing specially...

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system...

Important: Red Hat Security Advisory: nodejs22 security update

An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...