CVE-2026-89610

In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service, improper input validation, and race condition due to Kubernetes (CVE-2025-0426, CVE-2025-1767, CVE-2024-7598)

Summary Potential vulnerabilities in kubernetes package CVE-2025-0426, CVE-2025-1767, CVE-2024-7598 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-0426 DESCRIPTION: A security issue was discovered in Kubernetes where a large number of container...

PYSEC-2026-3852 OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

CVE-2026-77904

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72985

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69582

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69468

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69432

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69418

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69407

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69334

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69291

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-72985

A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...

EUVD-2026-73737

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69334

CVE-2026-69334 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable remote code e...

EUVD-2026-73685

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

EUVD-2026-73684

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69291

A heap-based buffer overflow in the Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code remotely over a network. The vulnerability is rated CVSS 8.8 (HIGH) with an attack vector of network, low complexity, no privileges required, and user interaction required. ...

CVE-2026-69407

CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...