29881 matches found
BELL-CVE-2026-74689
Bulletin has no description...
BELL-CVE-2026-74669
Bulletin has no description...
BELL-CVE-2026-74587
Bulletin has no description...
BELL-CVE-2026-74585
Bulletin has no description...
MINI-RXRV-6C48-GR39
Bulletin has no description...
MINI-R7H4-9F9G-CPWR
Bulletin has no description...
ECHO-8C58-478E-807B Same upstream fix as CVE-2026-68513, in the PyOpenEXR Python bindings. 3.1.13 has no src/wrappers/python.
Bulletin has no description...
SUSE CVE-2026-19499
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
SUSE CVE-2026-19542
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...
SUSE CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
SUSE CVE-2026-77679
unknown...
ECHO-3B00-F8EA-BEA7
Bulletin has no description...
CVE-2026-63676
backtracking leading to exponential load time...
UBUNTU-CVE-2026-63676
backtracking leading to exponential load time...
UBUNTU-CVE-2026-19499
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
CVE-2026-19499
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
CVE-2026-77117
Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...
UBUNTU-CVE-2026-77117
Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...