Security Bulletin: Due to use of VMware ESXi and vCenter, IBM Cloud Pak System is affected by multiple vulnerabilities.

Summary Vulnerabilities in VMware ESXi and vCenter affect IBM Cloud Pak System. IBM Cloud Pak System version 2.3.6.2 has addressed these vulnerabilities. Cloud Pak Sytem has updated Platform System Manager PSM and workload nodes to VMware ESXi 83U3k and VMware vCenter to VCSA 83U3k. Vulnerability...

CLEANSTART-2024-YS67864 Out of bounds write in TabStrip in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in TabStrip in Google Chrome prior to 91...

CLEANSTART-2024-IC10975 Out of bounds write in ANGLE in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...

CLEANSTART-2024-UP16796 Out of bounds write in ANGLE in Google Chrome prior to 91

Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...

CLEANSTART-2024-DU13933 Out of bounds write in Autofill in Google Chrome prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Autofill in Google Chrome prior to 92...

CLEANSTART-2024-DM83445 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92...

CLEANSTART-2024-WX22664 Out of bounds write in Tab Groups in Google Chrome prior to 92

Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome prior to 92...

CLEANSTART-2024-BI69034 Out of bounds write in V8 in Google Chrome prior to 93

Security vulnerability affects the chromium package. Out of bounds write in V8 in Google Chrome prior to 93...

CLEANSTART-2025-UQ49615 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

Security vulnerability affects the exim package. Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability...

SUSE-SU-2026:4409-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. - CVE-2026-18304: TIF File...

thrift: thrift: Denial of Service via integer underflow in THeaderTransport

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

CLEANSTART-2023-SN97100 out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText

Security vulnerability affects the djvulibre package. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Подробный технический анализ уязвимости локального повышения привилегий CVE-2026-43284 Dirty Frag в ядре Linux. CVE-2026-43284 обычно упоминаемая как часть набора уязвимостей Dirty Frag — это критическая уязвимость локального повышения привилегий LPE в ядре Linux. Она...

Chromium CVE-2026-87438: Out of bounds write in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

A vulnerability exists in certain ASUS motherboards due to improper initialization . This flaw allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device . The vulnerability has a high severity score of 7.0 (CVSS 4.0) and requires physical access....

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

SUSE CVE-2026-97570

In the Linux kernel, the following vulnerability has been resolved: bnxten: Bound SW TPA IDs to prevent crashes FW supports up to 1024 concurrent TPAs, so the FW TPA ID is in the range 0..1023 see commit ec4d8e7cf024 "bnxten: Add TPA ID mapping logic for 57500 chips.". bnxtallocaggidx is intended...

SUSE CVE-2026-97580

In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity computetilesuniform and computetilesnonuniform loop over numtilecolumnsminus1 + 1 / numtilerowsminus1 + 1 entries, and assemblehwpps writes one COLUMNWIDTH /...