105763 matches found
CVE-2026-63209
The compress library (prior to version 1.18.7 ) contains a signed integer overflow vulnerability in the s2.NewDict() function. An attacker can bypass repeat index validation by providing a dictionary with a uvarint-encoded repeat value exceeding MaxInt64 . When Dict.Encode() is subsequently execu...
CVE-2026-63209 Integer Overflow or Wraparound and Out-of-bounds Write in compress
compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205
Summary IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205, This bulletin contains information regarding the vulnerability and...
gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing
A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...
CVE-2026-98164
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. When virtualized System Management Mode SMM is enabled, memory write tracking only checks the active memory slot rather than all address spaces sharing shadow pages. An attacker inside a guest virtual machine can...
CVE-2026-97425
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver fails to enforce maximum size limits on the sysfs interface used for updating the video Basic Input/Output System vBIOS. A local user with write access to the device interface could exploit this flaw by sending data exceedin...
Exploit for CVE-2026-85520
CVE-2026-85520 — PrestaShop gmfeed unauthenticated arbitrary f...
CVE-2026-98164
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
UBUNTU-CVE-2026-98164
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing
A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...
CVE-2026-85520
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
OPENSUSE-SU-2026:21968-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local...
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
EUVD-2026-88753
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses...
EUVD-2026-88735
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
CVE-2026-85520 Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
CVE-2026-85520
The gmfeed (Google Merchant Center Feed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write via the feed.php endpoint. The root cause is a lack of authentication and input validation, which allows an attacker to control the output filename, path, extension, and content th...
CVE-2026-85520 Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...