CVE-2026-52295

A flaw was found in FFmpeg. This buffer overflow vulnerability allows an attacker to cause a denial of service. The flaw occurs when processing data through the libavformat/iamfwriter.c component. Mitigation Update to FFmpeg 9.0 or later. If updating is not possible, avoid processing untrusted IA...

CVE-2026-118753

A flaw was found in FreeImage. By convincing a user or system to process a specially crafted GIF file with frame boundaries exceeding the logical screen width, an attacker can trigger a heap-based buffer overflow during image compositing. This flaw can corrupt heap memory, potentially leading to...

CVE-2026-118322

A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568895029...

CVE-2026-118318

An improper access control flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565133743...

CVE-2026-116267

A flaw was found in MIME::Parser. A remote attacker can cause a Denial of Service DoS by supplying a truncated, deeply nested message without closing boundaries. Because the parser records indented error messages for each nesting level without enforcing depth limits, processing such input leads t...

CVE-2026-76025

An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559780982...

CVE-2026-110985

A flaw was found in Apache Kafka. When configured to use token-based authentication without a remote key validation endpoint, the broker falls back to an internal validator that does not check JSON Web Token JWT signatures, algorithms, or issuers. An unauthenticated remote attacker can exploit th...

CVE-2026-118475

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...

CVE-2026-112922

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript...

CVE-2026-118681

A flaw was found in chi. An unauthenticated remote attacker can access sensitive information by bypassing authentication controls when the SuppressNotFound middleware is used. Due to improper handling of routing context, requests to a mounted path can be dispatched against outer routes while...

CVE-2026-99149

A flaw was found in the AMDGPU graphics driver within the Linux kernel. When memory allocation fails during user pointer memory validation in the amdgpugemuserptrioctl function, the driver immediately returns an error and bypasses required cleanup routines. This issue causes Graphics Execution...

CVE-2026-99140

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to the tracing interface can cause a Denial of Service DoS due to a race condition when attaching histogram triggers to filtered events. Under specific timing conditions, buffered trace events are processed without...

CVE-2026-118258

A flaw was found in i18next-http-backend. A remote attacker who controls language or namespace input values can cause information disclosure by injecting unexpected query parameters into translation request URLs. Because the component fails to sanitize query separators during URL interpolation, a...

CVE-2026-99137

In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...

CVE-2026-99136

A flaw was found in the Linux kernel's dm-crypt subsystem. A race condition occurs during pending disk encryption request processing where the error status is read before reference counting is completed. During concurrent input/output I/O operations, this flaw causes failed read or write operatio...

CVE-2026-116142

A flaw was found in ImageMagick. When generating minimum-bounding-box output for an image, the application can read past allocated memory boundaries, resulting in a heap buffer over-read. An attacker could exploit this flaw by supplying a specially crafted image file to be processed. Successful...

CVE-2026-118581

A flaw was found in the MongoDB Java Driver. The BSON Binary JSON encoding component fails to verify that an externally supplied raw document's declared length matches its actual byte range before copying it into an outgoing database command. A remote attacker can exploit this flaw by submitting...

CVE-2026-118251

A flaw was found in Highcharts. When a user clicks the chart credits label, the library navigates to the configured link without verifying the URL against an allowed-scheme list. An attacker who controls chart configuration settings can supply a malicious link to trigger cross-site scripting XSS...

CVE-2026-118246

A flaw was found in Highcharts. This vulnerability allows cross-site scripting XSS because the library applies breadcrumb styling as unfiltered Scalable Vector Graphics SVG attributes rather than style properties. A remote attacker who controls chart configurations can inject malicious event...

CVE-2026-118244

A flaw was found in Highcharts. An attacker can execute arbitrary script via cross-site scripting XSS by supplying malicious HTML markup in chart text options, such as titles or labels. When a chart is redrawn during a print event in certain browsers, an error causes Highcharts to bypass its...

CVE-2026-116797

A flaw was found in Highcharts Grid Pro. Cross-Site Scripting XSS can occur when an attacker who controls table column configurations injects malicious event-handler attributes into rendered input elements. When a user interacts with or edits an affected cell, the injected script executes in thei...

CVE-2026-118242

A flaw was found in Highcharts. When rendering grid icons using Scalable Vector Graphics SVG, the library copies configuration properties directly into element attributes without proper sanitization. An attacker who controls the grid configuration can supply malicious event handlers within custom...

CVE-2026-115644

A flaw was found in Apache Kafka Connect. When a dedicated network listener is configured for administrative services, configured security and authentication extensions are not applied to the administrative endpoints. An unauthenticated remote attacker with network access to this administrative...

CVE-2026-111496

A flaw was found in Kafka Streams. An attacker with write access to a source topic can cause a Denial of Service DoS by submitting a record with an excessively large timestamp. Due to a missing integer overflow check when scheduling periodic stream tasks, the calculation overflows and causes the...

CVE-2026-111073

A flaw was found in Apache Kafka. The broker-side telemetry interface validates only the compressed size of incoming metrics payloads, failing to enforce a limit on the decompressed data size. An authenticated client can exploit this flaw by sending a small, highly compressed payload that expands...

CVE-2026-110133

A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size checks, triggering a heap-based buffer overflow. A remote attacker could exploit this by enticing a victim or automated...

CVE-2026-118959

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kcaction query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of...

CVE-2026-99150

A flaw was found in the Linux kernel's AMD GPU driver. When an error occurs while copying register data to user space during a debugfs read operation, the driver improperly releases a runtime Power Management PM reference twice. A local user could exploit this flaw by providing an invalid memory...

CVE-2026-99151

A flaw was found in the Linux kernel's AMD display driver. This flaw allows a local user to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the driver fails to properly validate display stream references before allocating or deallocating USB4 bandwidth,...

CVE-2026-75520

A flaw was found in Domoticz. Missing authorization checks allow low-privileged authenticated users to execute existing server scripts with attacker-controlled input. The application's device update command handler fails to validate user permissions before invoking Lua scripts and does not proper...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2026-109947

A flaw was found in FreeRDP. When a user connects to a malicious or compromised Remote Desktop Protocol RDP server with drive redirection enabled, the server can issue an oversized read request. Because incoming read request sizes are not properly bounded, the client attempts to allocate an...

CVE-2026-109946

A flaw was found in FreeRDP. When processing video streams, the client does not verify that image region dimensions are valid before performing color conversion. A malicious or compromised Remote Desktop Protocol RDP server can exploit this vulnerability by sending a specially crafted graphics...

CVE-2026-106016

A flaw was found in Mozilla Firefox and Thunderbird. A mitigation bypass in the File Handling component allows an attacker to bypass security protections. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. Mitigation Mitigation for this issue is either not available or the...

CVE-2026-79656

A flaw was found in Grafana. When a user signs in using generic OAuth, Google, or GitLab single sign-on connectors, Grafana may write the user's OAuth or OpenID Connect OIDC tokens to its server logs in plaintext. This occurs if the identity provider returns an opaque token or if token parsing...

CVE-2026-118338

An use after free flaw was found in the Animation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575826638...

CVE-2026-80789

A flaw was found in the Linux kernel's nvmet-tcp component. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted command with an oversized data length. This can lead to unbounded kernel memory allocation, causing a denial of service DoS due to resource exhaustion...

CVE-2026-80755

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. This vulnerability occurs because the system does not properly check the size of permission values when processing security policies. A specially crafted SELinux policy could cause the kernel to write data outside o...

CVE-2026-80825

A flaw was found in the mt7925 Wi-Fi driver in the Linux kernel. A remote attacker could exploit this by sending specially crafted network frames through a bridged interface to an mt7925u Access Point AP. This improper handling of network packet headroom can lead to a kernel panic, causing a deni...

CVE-2026-8822

A flaw was found in the vtkDEMReader component of VTK. By processing a specially crafted Digital Elevation Model DEM file in the ReadProfiles function, an attacker can trigger a buffer overflow. This vulnerability leads to memory corruption, resulting in an application crash and a Denial of Servi...

CVE-2026-8824

A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap BMP files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and...

CVE-2026-117988

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component...

CVE-2026-9536

A flaw was found in vtk. A heap-based buffer overflow in the vtkWindBladeReader component allows an attacker to cause an application crash and a Denial of Service DoS by supplying a specially crafted .wind file...

CVE-2026-99141

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local user with access to tracing controls to cause a Denial of Service DoS by triggering a kernel crash. When switching tracers, the kernel leaves trace flags unassigned if the new tracer lacks default flags. I...

CVE-2026-99143

A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service DoS or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event...

CVE-2026-99144

A flaw was found in the Linux kernel's schedext extensible scheduler component. A race condition during the destruction of a user dispatch queue allows a deferred task re-enqueue operation to access memory that has already been freed. A local user can exploit this use-after-free vulnerability to...

CVE-2026-99142

A flaw was found in the Linux kernel's tracing subsystem. In the event filter parser, insufficient boundary checks allow the operator stack to be written past its allocated limit. A local attacker could exploit this vulnerability by submitting a specially crafted trace filter expression, triggeri...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

CVE-2026-99146

A flaw was found in the Linux kernel's Intel i915 graphics driver. When parsing Display Microcontroller DMC firmware headers, the driver fails to validate the target load address against allowed memory ranges. An attacker capable of supplying a crafted firmware file could exploit this vulnerabili...

CVE-2026-99147

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS or memory corruption. This issue arises during lock contention when the execution handler drmexec retains a pre-locked object that is about t...