EUVD-2026-2300

In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbtenabledefault and IO submission When wbtenabledefault is moved out of queue freezing in elevatorchange, it can cause the wbt inflight counter to become negative -1, leading to hung tasks in the writebac...

EUVD-2026-2293

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device ...

EUVD-2026-2309

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

EUVD-2026-2289

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCAPORTS component Clear hcadevcomcomp in device's private data after unregistering it in LAG teardown. Otherwise a slightly lagging second pass through mlx5unloadone might try to unregister it...

EUVD-2026-2323

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in pushnsh action The pushnsh action structure looks like this: OVSACTIONATTRPUSHNSHOVSKEYATTRNSHOVSNSHKEYATTRBASE,... The outermost OVSACTIONATTRPUSHNSH attribute is OK'ed by the...

EUVD-2026-2314

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-55130

creationtimestamp| type| source ---|---|--- 2026-01-13 14:00:18+00:00| seen| https://seclists.org/oss-sec/2026/q1/59 2026-01-13 15:25:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mccuh6vrzo2z 2026-01-13 23:50:43+00:00| seen| https://seclists.org/oss-sec/2026/q1/63 2026-01-...

EUVD-2026-2353

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...

CVE-2026-0892

Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

EUVD-2026-2344

Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...

EUVD-2026-2342

Information disclosure in the Networking component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2341

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2086

Sandbox escape due to integer overflow in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

EUVD-2026-2355

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2026-22835

creationtimestamp| type| source ---|---|--- 2026-01-13 08:04:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcc3siyfnk2c...

EUVD-2026-2368

Not used...

EUVD-2026-2367

Not used...

EUVD-2026-2356

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

CVE-2024-58340

creationtimestamp| type| source ---|---|--- 2026-01-13 02:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbiegwuie2x 2026-03-15 11:48:44+00:00| seen| https://gist.github.com/ragettostudio/85f4f660c32a41c3af0771080e11b64b 2026-03-15 12:22:13+00:00| seen|...

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...