CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-78132 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-HH8M-FM6V-7CVG vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-F47W-MRG9-G9P2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner, gitlab-pages, gitlab-runner-fips...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner, gitlab-pages, gitlab-runner-fips...

CVE-2026-78129 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-693G-PPP7-3J2H vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-J374-979J-MCX7 vulnerabilities

Vulnerabilities for packages: strongswan...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: mlflow, kserve...

CVE-2026-92079

Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92064

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92009

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

ROS-20260915-73-0096

The vulnerability of the SafeBrowsing component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through the use of a malicious file...

CVE-2026-90804

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cielength/fdelength/augmentationdatasize/writeoffset results in...

CVE-2026-90792

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

CVE-2026-90791

A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

Astra Linux – Vulnerability in Qt4-X11, qtsvg-opensource-src

In Qt versions prior to 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, the initialization of munitsPerEm in QtSvg QSvgFont is handled incorrectly...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 9.0.0044...

Astra Linux – Vulnerability in Chromium

Integer overflow in Skia in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...