The vulnerability of the Microsoft PowerToys system utilities, related to authentication errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft PowerToys system utilities is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

ROS-20260617-73-0032

The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Important: xorg-x11-server security, bug fix, and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution du...

Important Photon OS Security Update - PHSA-2026-5.0-91-0883

Updates of 'libpng', 'erlang' packages of Photon OS have been released...

PT-2026-50572

TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a forbidden range allowing for DNS rebinding bypass. The root cause is a time-of-check to time-of-use gap in the SSRF guard...

PT-2026-50210

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description Insufficient policy enforcement in File System Access allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site...

ROS-20260617-73-0029

The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Photon OS 5.0: Libssh2 PHSA-2026-5.0-0857

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0857. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Malicious code in backoffice-charges-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047eb92a0e8bb401b2c205765616c9b4b715ee7cfd33d2e6ef9dc8d645b77f04 On every npm install, the preinstall lifecycle script node index.js /dev/null 2&1 silently HTTPS-POSTs a JSON payload to https://avamnrwqo7.rbmock.de...

MAL-2026-5929 Malicious code in backoffice-charges-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047eb92a0e8bb401b2c205765616c9b4b715ee7cfd33d2e6ef9dc8d645b77f04 On every npm install, the preinstall lifecycle script node index.js /dev/null 2&1 silently HTTPS-POSTs a JSON payload to https://avamnrwqo7.rbmock.de...

USN-8426-2: Linux kernel (Azure) vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...

EUVD-2026-37177

In lwisdeviceexternaleventemit of lwisevent.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37186

In OSMMapPMRGeneric of pmros.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

EUVD-2026-37172

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-37171

In edgetpusyncfencegroupshutdown of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-42500 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, seaweedfs-operator, seaweedfs...

CVE-2026-46599 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-rocksdb-fips, mattermost-fips, seaweedfs-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, seaweedfs-operator, seaweedfs...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: wazuh-manager, semgrep, duplicity, openstack-tempest-2025.1, openstack-tempest-2026.1, litellm, dask-kubernetes, kubeflow-jupyter-web-app, apache-beam-python-3.13-sdk, openstack-kolla-toolbox-2025.2, ggshield, opal, openstack-glance-2025.2, openstack-horizon-2025.2,...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: in-toto, superset, dask-kubernetes, jupyter-base-notebook, kserve, k8s-sidecar, mycli, mlflow, airflow, py3-cassandra-medusa, ggshield, semgrep, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mitmproxy, datadog-agent...