CVE-2026-25269

A memory corruption vulnerability exists in the Camera Driver due to an out-of-bounds write (CWE-787). The issue occurs when the driver processes camera requests with excessive batch and IO buffer configurations that exceed the allocated memory size. This vulnerability results in high impact acro...

CVE-2026-25263 Out of Bounds write in Linux Camera

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters...

CVE-2026-25263

The Linux Camera component is vulnerable to memory corruption due to an out-of-bounds write (CWE-787). This issue occurs when the kernel processes an IOCTL command from user space containing invalid parameters . The vulnerability allows for potential integrity impact, as indicated by the CVSS sco...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

DEBIAN-CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

UBUNTU-CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CLEANSTART-2026-IF00623 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

Security vulnerability affects the go1.27 package. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content...

CVE-2026-105786

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...

CVE-2026-104036 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-104036 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

EUVD-2026-92893

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-104036

A flaw in the SSSD NFS idmap plugin allows for an out-of-bounds write when retrieving cached user or group names. The vulnerability occurs because the plugin identifies that an entry exceeds the destination buffer size but fails to abort the operation before copying the data. A local attacker can...

CVE-2026-104036

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

CVE-2026-77178

Oracle VM VirtualBox versions prior to 7.2.8 are vulnerable to an out-of-bounds write in the host OS. The flaw is located within the pcnetReceiveNoSync function in DevPCNet.cpp, specifically affecting the PCNet (Am79C970A) network device model. This allows guest OS users to trigger the write. No ...

CVE-2026-95140

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

PT-2026-107212

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager OnGuard agent affected versions not specified Description An arbitrary file write issue exists in the ClearPass Policy Manager OnGuard agent. This flaw allows local users to elevate their privileges and execute arbitra...

PT-2026-107106

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An out-of-bounds write exists in the wacom hid set device mode function within wacom sys.c due to a missing bounds check. This flaw allows for physical escalation of privilege without...