CVE-2026-112059: Out-of-bounds Write

libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools...

PT-2026-116642

libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools...

PT-2026-116995

In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder add device binderfs binder device create publishes the new dentry with d make persistent and then calls simple done creating, which drops the parent directory lock and the creator's dentry...

VulnCheck KEV: CVE-2026-96656

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol check...

CVE-2026-98545: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: bound the ATA passthru sense descriptor writes When an ATA PASS-THROUGH command to an ATAPI device fails, the sense buffer holds the device's REQUEST SENSE reply, and atascsisetpassthrusensefields trusts its...

CVE-2026-98615: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AWFLUSHMODE alongside AWFLUSH when flushing the mailbox When tearing down the FW mailbox Rx ring, fbnicmbxresetdescring writes AWCFG with FLUSH set and everything else, BME included, cleared. Clearing BME halts th...

Security update for mutt (important)

openSUSE security update: security update for mutt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22099-1 Rating: important References: bsc1284739 Cross-References: CVE-2026-107570 CVSS scores: CVE-2026-107570 SUSE : 7.5...

Security update for pgvector (important)

openSUSE security update: security update for pgvector ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22065-1 Rating: important References: bsc1284129 Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8...

Security update for libXpm (moderate)

openSUSE security update: security update for libxpm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22056-1 Rating: moderate References: bsc1281669 Cross-References: CVE-2026-94287 CVSS scores: CVE-2026-94287 SUSE : 6.2...

Security update for gimp (important)

openSUSE security update: security update for gimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22123-1 Rating: important References: bsc1277594 bsc1277618 bsc1277622 bsc1284473 bsc1284474 bsc1284475 Cross-References: CVE-2026-106061...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE security update: security update for ntfs-3gntfsprogs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22053-1 Rating: moderate References: bsc1281756 bsc1281757 bsc1281758 bsc1281759 bsc1281760 bsc1281761 bsc1281762 bsc1281763 Affected...

CVE-2026-98741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSize...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1686651204)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1686651204 advisory. - A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was foun...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1686585068)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1686585068 advisory. - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require tha...

Exploit for CVE-2026-53995

CVE-2026-53995: MLflow starttracev3 - TraceInfo.from...

yova_ps5

YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...

CVE-2026-111918

Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that allows authenticated users with zero accessible projects to write taskpositions rows for all tasks instance-wide. Attackers can delete their Inbox after repointing defaultprojecti...

DEBIAN-CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

DEBIAN-CVE-2026-111880

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATEMESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyon...