CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69457: Out-of-bounds Read

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-69319: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

Security update for libusb-1_0

This update for libusb-10 fixes the following issue: CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4050-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664...

SUSE-SU-2026:23644-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

SUSE-SU-2026:23501-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

SUSE-SU-2026:23660-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

OPENSUSE-SU-2026:21783-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-073375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073375 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073353 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: mctu232: fix memory corruption with small endpoint The driver overrides the maximum...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053319 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its pare...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053227 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacrubind Syzbot is still reporting quite an old issu...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001472 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073360 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI...

PT-2026-102491

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Wireshark versions 4.4.0 through 4.4.18 Description The USB HID protocol dissector contains an infinite loop and a memory leak, which can lead to a denial of service. Recommendations Update Wireshark...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053397 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053311)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053311 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053260 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before lookin...

SUSE CVE-2026-80780

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without first checking that hid-inputs is non-empty. The list member of struct...