CVE-2026-47523

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger an out-of-bounds write memory error in the kernel mode layer. Successful exploitation could lead to privilege escalation and arbitrary code execution with kernel permissions, cause a Denial of Service...

CVE-2026-47513

A flaw was found in the NVIDIA GPU display driver nvidia-driver. A vulnerability in the kernel mode layer allows a local user to trigger an out-of-bounds read from kernel heap memory. A successful exploit could enable an attacker to achieve arbitrary code execution, escalate privileges, cause a...

CVE-2026-47529

A flaw was found in the NVIDIA GPU display driver. A local attacker with administrative privileges can trigger an out-of-bounds write in the driver's kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or...

CVE-2026-47526

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with administrative privileges can trigger a null pointer dereference vulnerability within the driver firmware. Successful exploitation may lead to a Denial of Service DoS by causing the system or graphics subsystem to crash...

CVE-2026-100076

A flaw was found in the Linux kernel's rtl8723bs wireless network driver. When handling wireless management frames under certain error conditions, the driver fails to release allocated transmission frames and buffers back to their memory pools. An attacker within radio range could send unexpected...

CVE-2026-100075

A flaw was found in the Linux kernel's SCSI Remote Direct Memory Access Protocol SRP target driver. When memory allocation fails while processing multi-buffer descriptors, the error-handling routine fails to reset internal tracking counters and leaves an invalid memory pointer. A remote client...

CVE-2026-74268

A flaw was found in the Linux kernel. A race condition exists in the TCP Transmission Control Protocol component when handling child sockets. If a child socket's setup fails, it can inherit BPF Berkeley Packet Filter socket operation flags, leading to a situation where the system attempts to call...

CVE-2026-53718

A flaw was found in Envoy Gateway. An attacker could exploit a vulnerability in how HTTPRoute handles custom backend references. This allows a route-owning namespace to access and utilize resources in another namespace without proper authorization, bypassing the intended Gateway API cross-namespa...

CVE-2026-47603

A flaw was found in the NVIDIA GPU Display Driver. Missing authorization checks in the kernel mode driver allow a local user to access the Graphics Processing Unit GPU channel state of another process. A local attacker can exploit this vulnerability to access sensitive process data, resulting in...

CVE-2026-47562

A flaw was found in the NVIDIA GPU Display Driver for Linux. The driver's kernel mode layer fails to properly sanitize user-supplied version strings, allowing a local user to inject crafted text into the kernel log. A successful exploit can lead to log data tampering and a Denial of Service DoS...

CVE-2026-47517

A flaw was found in nvidia-driver. A local user can submit a specially crafted input/output control ioctl request to the kernel-mode driver, triggering a null pointer dereference. Successful exploitation can crash the system, resulting in a Denial of Service DoS. Mitigation Prevent the NVIDIA...

CVE-2026-12624

A flaw was found in Vault's Access Control List ACL policy engine. The engine did not consistently enforce wildcard deny rules against LIST requests with a trailing slash. This vulnerability could allow an authenticated attacker with specific permissions to enumerate the names of entries they wer...

CVE-2026-94029

A flaw was found in Apache MINA SSHD. When processing SSH File Transfer Protocol SFTP check-file extensions, the server accumulates file hash verification responses entirely in memory without enforcing a size limit. An authenticated remote attacker can exploit this vulnerability by requesting fil...

CVE-2026-100077

A flaw was found in the Linux kernel's MSM DRM driver. This vulnerability can lead to a Denial of Service DoS during GPU recovery operations. If a hung command submission is retired before the hardware recovery process completes, the driver may release memory buffers that the GPU is still activel...

CVE-2026-47592

A flaw was found in nvidia-driver. An out-of-bounds read vulnerability in the kernel mode layer allows a local, unprivileged user to access memory outside of intended boundaries. Successful exploitation may result in arbitrary code execution, privilege escalation, denial of service DoS, or...

CVE-2026-47590

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged attacker can trigger a use-after-free memory issue accessing memory after it has been released by issuing a specific sequence of driver commands. Successful exploitation may allow the attacker to achieve arbitrary code...

CVE-2026-47588

A flaw was found in the NVIDIA GPU display driver for Linux. A local unprivileged user can trigger a use-after-free condition, where the driver references memory after it has been freed, by issuing a specific sequence of driver commands. Successful exploitation could allow an attacker to achieve...

CVE-2026-47583

A flaw was found in the NVIDIA GPU Display Driver kernel module. A local attacker with standard user privileges can exploit a type confusion vulnerability where the driver misinterprets data structures during processing. Successful exploitation could allow the attacker to execute arbitrary code...

CVE-2026-47569

A flaw was found in the NVIDIA GPU display driver. A local user can trigger a race condition during handle recycling in the kernel mode layer, resulting in a type confusion condition where memory of one type is misinterpreted as another. A successful exploit could allow an attacker to achieve...

CVE-2026-47556

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial ...

CVE-2026-47551

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges,...

CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access...

CVE-2026-100811

A flaw was found in Firefox. A use-after-free memory flaw in the Document Object Model DOM Core and HTML component allows a remote attacker to perform a sandbox escape. By enticing a user to visit a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code...

CVE-2026-100786

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Graphics component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-47597

A flaw was found in the NVIDIA GPU Display Driver. An unprivileged local user can exploit a missing self-reference check during map cleanup in the open-source kernel module Resource Server, causing a use-after-free condition where released memory is improperly accessed. Successful exploitation...

CVE-2026-47589

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger a use-after-free condition, where memory is improperly accessed after being released, by issuing a specific sequence of driver commands. Successful exploitation could allow the attacker to execute...

CVE-2026-47587

A flaw was found in nvidia-driver. A local unprivileged user can trigger a use-after-free condition in the NVIDIA GPU Display Driver for Linux, allowing them to execute arbitrary code or escalate privileges on the system. Successful exploitation could also result in a Denial of Service DoS,...

CVE-2026-47561

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control ioctl request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the...

CVE-2026-47560

A flaw was found in the NVIDIA GPU Display Driver for Linux. An unprivileged local user can trigger a use-after-free condition in the kernel mode layer, allowing memory to be accessed after it has been released. A successful exploit could permit an attacker to achieve arbitrary code execution,...

CVE-2026-47514

A flaw was found in nvidia-driver. A local user can trigger an issue in the driver's kernel mode layer that exposes sensitive kernel stack contents, including return addresses and memory pointers. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privilege...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

CVE-2026-94002

A flaw was found in the sshd-sftp component of Apache MINA SSHD. This vulnerability allows a malicious server to cause a Denial of Service DoS on the client by exhausting system memory. The SFTP SSH File Transfer Protocol client fails to verify whether incoming replies correspond to previously se...

CVE-2026-93994

A flaw was found in Apache MINA SSHD. When the server is configured to require multiple Secure Shell SSH public keys for authentication, it fails to verify that the submitted keys are distinct. A remote user can exploit this flaw by presenting the same public key twice to satisfy multi-key...

CVE-2026-93125

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability occurs because the verifier does not correctly handle certain buffer size arguments, allowing values larger than a 32-bit integer. When these oversized values are processed, they are truncated, leading ...

CVE-2026-93144

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The checkptrtobtfaccess function, which is responsible for validating memory access through BPF Type Format BTF pointers, incorrectly allowed certain program-type callbacks to bypass the intended read-only policy for...

CVE-2026-93112

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. The bpfcpumaskpopulate function incorrectly allows writing to a read-only memory region by accepting borrowed cpumask pointers as writable destinations. This could allow a local attacker to cause a denial of service or...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103118

A flaw was found in GraphicsMagick. This vulnerability allows a remote attacker to cause a Denial of Service DoS by convincing a user or service to process a specially crafted WordPerfect Graphics WPG image file. Due to uncontrolled recursion within the WPG file handler's ExtractPostscript...

CVE-2026-90333

A flaw was found in the Linux kernel's device-mapper integrity dm-integrity target. This vulnerability allows an attacker with raw write access to the backing device, but without the integrity key, to bypass data integrity checks. By stamping any block with a specially crafted discard filler tag,...

CVE-2026-103226

A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service DoS or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer...

CVE-2026-94052

A flaw was found in the sshd-ldap component of Apache MINA SSHD. Due to a missing verification check in the Lightweight Directory Access Protocol LDAP password authenticator LdapPasswordAuthenticator, user credentials are not properly validated. A remote, unauthenticated attacker can exploit this...

CVE-2026-13720

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

CVE-2026-13719

A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...

CVE-2026-93995

A flaw was found in Apache MINA SSHD. The sshd-git module does not properly restrict command-line arguments when executing Git commands over Secure Shell SSH connections. An authenticated remote attacker can exploit this issue by providing a crafted output parameter during an archive operation...

CVE-2026-94053

A flaw was found in the sshd-ldap component of Apache MINA SSHD. This vulnerability allows an unauthenticated remote attacker to bypass authentication due to improper escaping of LDAP Lightweight Directory Access Protocol filter metacharacters during credential verification. By supplying speciall...

CVE-2026-103044

A flaw was found in the MediaWiki EasyTimeline extension. An Extensible Markup Language XML injection vulnerability exists due to improperly serving image map files as XML data. A remote attacker could exploit this flaw by convincing a user to interact with specially crafted content, potentially...

CVE-2026-86248

A flaw was found in Apache Tomcat. When client certificate authentication is configured with strict certificate revocation checking, Online Certificate Status Protocol OCSP verification may improperly allow connections instead of failing as intended. A remote attacker presenting an invalid or...

CVE-2026-88920

A flaw was found in Apache WSS4J. This vulnerability in the Document Object Model DOM security processor allows an unauthenticated remote attacker to bypass authentication and forge authenticated Simple Object Access Protocol SOAP messages. An attacker can exploit this issue by submitting a...

CVE-2026-101295

Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...

CVE-2026-15815

A flaw was found in Grafana. When extracting plugin archives, Grafana did not safely resolve symbolic links. A remote attacker could craft a malicious plugin archive with symbolic links to escape the plugin installation directory. This allows the attacker to write arbitrary files and execute...