CVE-2026-118769

A flaw was found in Botan. An attacker can exploit an unchecked integer truncation in the C programming interface by supplying untrusted algorithm parameters that specify a variable-block-size cipher. This flaw causes the application to allocate an undersized memory buffer, resulting in heap memo...

CVE-2026-99239

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP subsystem. A race condition between concurrent socket bind and connect operations allows a communication channel to be attached to a connection multiple times. A local attacker can exploit this fla...

CVE-2026-120067

A flaw was found in postgresql-odbc. When processing updatable database queries, the driver copies internal row metadata into a fixed-size memory buffer without verifying the data length sent by the server. A malicious database server or an untrusted user capable of creating custom database views...

CVE-2026-120066

A flaw was found in postgresql-odbc. This issue leads to information disclosure and potential unauthorized file modification due to insecure log file creation in shared temporary directories. When logging is enabled on Unix-like systems, the driver creates world-readable log files with predictabl...

CVE-2026-120059

A flaw was found in postgresql-odbc. When processing updatable cursors, the driver improperly uses a server-provided column name as a format string when constructing query statements. A malicious database server or an attacker able to create a table with a specially crafted column name can cause...

CVE-2026-99240

A flaw was found in the Linux kernel's Data Access Monitor DAMON subsystem. A local user can trigger a division-by-zero error by configuring a monitoring scheme with a quota target value of zero. This failure can cause the kernel to crash, resulting in a Denial of Service DoS...

CVE-2026-99217

A flaw was found in the Linux kernel. A race condition during process creation cleanup can cause an internal deadlock when a process creation operation fails while closing an associated file descriptor. A local user could exploit this vulnerability to cause a Denial of Service DoS by preventing n...

CVE-2026-120065

A flaw was found in postgresql-odbc. When handling updatable cursors, the driver fails to properly sanitize quotation marks in column names before inserting them into internal database queries. An authenticated database user with permission to create tables, or an untrusted database server, can...

CVE-2026-120062

A flaw was found in postgresql-odbc. When an application passes untrusted table or schema names to the SQLSpecialColumns catalog function, the driver fails to properly escape the input before concatenating it into internal database queries. An attacker able to supply crafted input can execute...

CVE-2026-120061

A flaw was found in postgresql-odbc. When processing Open Database Connectivity ODBC escape sequences in SQL statements, the parser fails to properly validate buffer boundaries. An attacker capable of submitting untrusted SQL text to an application using the driver can trigger a stack-based buffe...

CVE-2026-120058

A flaw was found in postgresql-odbc. An untrusted database server can exploit this vulnerability to execute arbitrary code or cause a denial of service DoS on the client system. When cursor-based fetching is enabled, the driver determines its row cache size using the column count from the initial...

CVE-2026-120057

A flaw was found in psqlODBC. When processing large-object read loread responses from a database, the driver copies returned data into the application buffer without checking whether the data exceeds the buffer size. A malicious server or a network attacker performing a man-in-the-middle MitM...

CVE-2026-99235

A flaw was found in the Linux kernel's event tracing subsystem. A local user with permissions to configure trace event triggers could exploit this flaw to achieve privilege escalation or cause a Denial of Service DoS. The issue occurs when the kernel improperly retains a reference to compatible...

CVE-2026-99233

A flaw was found in the Linux kernel's event tracing subsystem. The kernel fails to properly verify the unique identity of trace events when updating reference counters for histogram triggers, comparing only their names. A local user with access to the tracing interface can exploit this by...

CVE-2026-99231

A flaw was found in the Linux kernel's iouring subsystem. A race condition in the waitid operation allows a request to be completed and freed while a wake-up handler is still accessing it, leading to a use-after-free vulnerability. A local user could exploit this flaw to cause a system crash,...

CVE-2026-116261

A flaw was found in libimobiledevice. This out-of-bounds read vulnerability allows a remote attacker to cause unauthorized information disclosure. By supplying manipulated input parameters to the Apple File Conduit AFC file opening routine, an attacker can cause the application to read memory pas...

CVE-2026-118026

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: GC component...

CVE-2026-120453

A flaw was found in The Sleuth Kit. When processing extended attributes on an HFS+ filesystem image, the application reads compression headers without properly validating the attribute length. An attacker could provide a specially crafted disk image to trigger an out-of-bounds memory read, causin...

CVE-2026-99077

A flaw was found in the Linux kernel's IPv4 User Datagram Protocol UDP implementation. When handling Internet Control Message Protocol ICMP error messages, routing exceptions were only recorded in the cache if the quoted UDP packet matched an existing active socket. An off-path remote attacker...

CVE-2026-120440

A flaw was found in QuickJS-NG. This vulnerability allows an attacker capable of running JavaScript code to cause a Denial of Service DoS through memory exhaustion. The issue occurs when the JavaScript engine fails to release allocated memory upon encountering an error during atomic storage...

CVE-2026-120437

A flaw was found in Netpbm. The tgatoppm converter fails to validate pixel values against color map bounds in the getpixel function. By supplying a specially crafted color-mapped Targa file, an attacker can trigger an out-of-bounds read. This flaw can lead to a Denial of Service DoS through an...

CVE-2026-118025

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the SVG component...

CVE-2026-118024

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...

CVE-2026-118020

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout component...

CVE-2026-118019

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the DOM: File component...

CVE-2026-118018

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...

CVE-2026-74564

A flaw was found in the Linux kernel, specifically within the netfilter xthashlimit module. Improper validation of the XTHASHLIMITRATEMATCH flag can lead to uninitialized access to memory. This occurs when multiple rules refer to the same hashtable or when the flag is used with an older revision,...

CVE-2026-111183

A flaw was found in GStreamer. A remote attacker can achieve arbitrary code execution by sending specially crafted Real-time Transport Protocol RTP stream packets to applications using the rtpL16depay plugin. This issue occurs due to a lack of proper validation on the length of incoming payload...

CVE-2026-120432

A flaw was found in Netpbm. An integer overflow in the winicontopam utility occurs when processing icon or cursor files with excessively large dimensions. By tricking a user or system into processing a specially crafted file, an attacker could corrupt memory, potentially leading to arbitrary code...

CVE-2026-120436

A flaw was found in Netpbm's jbigtopnm conversion utility. An integer overflow occurs when calculating output buffer dimensions for multi-plane JBIG Joint Bi-level Image Experts Group images with large header sizes, resulting in an undersized memory allocation. By convincing a user to process a...

CVE-2026-119301

A flaw was found in AWS SDK for pandas awswrangler. An authenticated remote user with permissions to modify AWS Glue Data Catalog metadata can supply a crafted column name to exploit improper quoting syntax neutralization when SQL identifiers are constructed in the Apache Iceberg write component...

CVE-2026-120433

A flaw was found in Netpbm. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by tricking a user or system into processing a specially crafted image file. A lack of boundary checking in the picttoppm utility allows a polygon with an excessi...

CVE-2026-118017

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-120457

A flaw was found in libaec. An attacker can cause a Denial of Service DoS or information disclosure by supplying a specially crafted compressed data stream. Due to an out-of-bounds read vulnerability in the decoding function msedecode, an overlong sequence bypasses bounds checking, causing the...

CVE-2026-114199

A flaw was found in Gitea. An authenticated user possessing a restricted, public-only access token can trigger an information disclosure vulnerability by querying the user contribution heatmap API endpoint. Due to improper enforcement of token scope restrictions, the endpoint computes activity da...

CVE-2026-99071

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition during concurrent routing table updates. This timing issue occurs when preparing route change notifications, generating an unexpected message size err...

CVE-2026-98275

A flaw was found in the Linux kernel's Cortina Ethernet driver. This flaw may result in a Denial of Service DoS when a network receive buffer overrun occurs. Due to an incorrect bit calculation, the interrupt service routine acknowledges the wrong register bit, leaving the overrun interrupt...

CVE-2026-98171

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious or compromised remote server can exploit this flaw by sending specially crafted compound encrypted network responses. Due to improper bounds validation and pointer lifecycle management, the client can encounter a...

CVE-2026-99076

A flaw was found in the Linux kernel's IPv6 UDP implementation. This flaw allows information disclosure through a side-channel vulnerability in the routing exception cache. An off-path remote attacker can exploit this flaw by sending crafted Internet Control Message Protocol version 6 ICMPv6 erro...

CVE-2026-99078

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When processing high-speed network traffic using XDP eXpress Data Path sockets under low-memory conditions, a failure during receive queue replenishment can cause previously freed memory buffers to be released again through sta...

CVE-2026-99072

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition when updating routing nexthop configurations concurrently with route notifications, causing a NULL pointer dereference. This flaw can lead to a kernel...

CVE-2026-99069

A flaw was found in the Linux kernel's atiremote2 input driver. A local user can exploit this type confusion vulnerability to cause a Denial of Service DoS. The issue occurs because the driver's device attribute handlers improperly treat an interface pointer as a parent device pointer. By...

CVE-2026-99020

A flaw was found in the Linux kernel's TPS6594 regulator driver. This flaw allows a local user or system process triggering device initialization to cause a Denial of Service DoS via an out-of-bounds memory read. The driver specifies more voltage range entries than exist in the descriptor table...

CVE-2026-99017

A flaw was found in the Linux kernel. Under specific configurations on RISC-V systems using T-Head processors, the kernel does not execute early boot checks required to identify hardware errata. As a result, the default mitigation for the Ghostwrite hardware vulnerability is not applied, which ma...

CVE-2026-99091

A flaw was found in the Linux kernel's Bluetooth subsystem. When pending management commands are flushed during an adapter power-off or device removal event, the kernel incorrectly reports command status values using internal memory pointer data instead of the intended error code. A local user ca...

CVE-2026-120420

A denial-of-service vulnerability was found in the Drools DRL expression parser org.drools:drools-drl-parser. The ANTLR4-generated DRL expression grammar parses parenthesised sub-expressions through mutually recursive descent rules with no limit on nesting depth. When a deeply nested parenthesise...

CVE-2026-99195

A flaw was found in the Linux kernel's OpenCores Ethernet driver ethoc. During device initialization, the driver connects the physical network interface before assigning its network device operations. A local attacker capable of triggering device probing on a system configured with network traffi...

CVE-2026-99180

A flaw was found in the Linux kernel's Unicode subsystem. This issue occurs because character mapping tables used for case-insensitive file lookups are freed immediately upon unmounting a filesystem without waiting for active path lookups to complete. A local user could exploit this race conditio...

CVE-2026-99177

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability may lead to a Denial of Service DoS due to improper locking when marking guest memory pages as modified during AMD Secure Encrypted Virtualization SEV operations. A local user with permissions to...

CVE-2026-109088

A flaw was found in libXtst. A malicious X server can send malformed RECORD EnableContext replies to a connected client. When processing these malformed responses, the client enters an infinite loop, resulting in a Denial of Service DoS condition where the application becomes unresponsive...