CVE-2026-64248

A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access Read-Copy Update or RCU is not properly informed that the CPU is no longer active...

CVE-2026-64221

A flaw was found in the spi: ti-qspi component of the Linux kernel. This use-after-free vulnerability occurs when the driver attempts to fall back to PIO mode after a Direct Memory Access DMA setup failure during probe. If the DMA channel pointer is not properly cleared after a buffer allocation...

CVE-2026-64244

A flaw was found in the Linux kernel's memory management. This vulnerability occurs when a memory block fails to register, but its associated memory map is not properly cleared during device removal. This can lead to a system warning and potential instability or a kernel crash, allowing a local...

CVE-2026-64251

A flaw was found in the Linux kernel's power sequencing pwrseq core. A local attacker with access to the debugfs interface could exploit a use-after-free vulnerability in the pwrseqdebugfsseqnext function. This flaw allows the kernel to access memory after it has been freed, which can lead to a...

CVE-2026-64211

A flaw was found in the Linux kernel. During certain CPU state transitions, the kernel's srcustruct mechanism may attempt to schedule tasks on processors that are not active or will never be online. This incorrect scheduling of workqueue handlers can lead to system unresponsiveness, specifically...

CVE-2026-66053

A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server's...

CVE-2026-64223

A flaw was found in the Linux kernel's mac80211 Wi-Fi driver. This vulnerability, an out-of-bounds read, occurs when parsing negotiated Time-To-Live Map TTLM elements. A remote attacker could craft a sparse map, causing the parser to read beyond the intended memory boundary. While direct policy...

CVE-2026-41608

A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessi...

CVE-2026-58023

A flaw was found in Apache Thrift cglib bindings. This out-of-bounds read vulnerability allows an attacker to potentially access sensitive information or cause a denial of service. The vulnerability occurs when the software attempts to read data beyond the allocated memory buffer...

CVE-2026-58342

A flaw was found in Moodle. The quiz feature, which allows users to add section headings, did not include a necessary security token. This vulnerability, known as Cross-Site Request Forgery CSRF, could allow a remote attacker to trick an authenticated user into performing unintended actions withi...

CVE-2026-64231

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for...

CVE-2026-58331

A flaw was found in the Moodle Database Activity module. This vulnerability allows an attacker to perform an arbitrary file read through the module's import feature. This could lead to the disclosure of sensitive information from the system...

CVE-2026-58332

A flaw was found in Moodle. This vulnerability allows an authenticated attacker to bypass another user's email-based multi-factor authentication MFA token check. While valid login credentials are still required, successful exploitation could lead to unauthorized access to another user's account...

CVE-2026-58333

A flaw was found in Moodle. An arbitrary file read risk was identified in the backup restore functionality. This vulnerability could allow an authenticated attacker to read arbitrary files on the server, potentially leading to information disclosure...

CVE-2026-45112

A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or thrott...

CVE-2026-58334

A flaw was found in Moodle. This vulnerability allows a remote attacker with administrative privileges to achieve remote code execution by exploiting the admin presets import feature. This could lead to unauthorized control over the affected system...

CVE-2026-58335

A flaw was found in Moodle. Missing group access checks in certain grade web services could allow a user to access grade and user information for students in groups they did not have permission to view. This could lead to unauthorized information disclosure...

CVE-2026-58338

A flaw was found in Moodle. The user profile page reset action did not properly implement a token to prevent Cross-Site Request Forgery CSRF. A remote attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially leading to unintended...

CVE-2026-55970

A flaw was found in Apache Thrift C++ bindings. This buffer over-read vulnerability allows a remote attacker to read beyond the intended memory boundaries. This could lead to the disclosure of sensitive information or cause the application to become unavailable...

CVE-2026-58337

A flaw was found in Moodle. The user homepage preference setting lacked a necessary token, making it vulnerable to a Cross-Site Request Forgery CSRF attack. A remote attacker could exploit this to trick a user into performing unwanted actions on the Moodle platform without their knowledge,...

CVE-2026-58340

A flaw was found in Moodle. The grade item ID number editing functionality lacked proper security measures, making it vulnerable to Cross-Site Request Forgery CSRF and Cross-Site Scripting XSS. A remote attacker could exploit these vulnerabilities to perform unauthorized actions or inject malicio...

CVE-2026-58339

A flaw was found in the Moodle Feedback activity module. Insufficient sanitization of the Feedback import error message could allow a remote attacker to perform a reflected Cross-Site Scripting XSS attack. This vulnerability enables the attacker to inject malicious scripts into a user's web...

CVE-2026-49158

A flaw was found in Apache Thrift Ruby bindings. This vulnerability, categorized as improper handling of highly compressed data, allows a remote attacker to cause a denial of service DoS through a data amplification attack. By sending specially crafted highly compressed data, an attacker can...

CVE-2026-64217

A flaw was found in the Linux kernel's netfs component. A local user can exploit this vulnerability by performing specific file I/O operations on a netfs-backed mount, leading to an overrun in the netfsextractuseriter function. This memory corruption can cause a kernel crash, resulting in a Denia...

CVE-2026-55968

A flaw was found in Apache Thrift Node.js bindings. This vulnerability, stemming from inefficient algorithmic complexity and the allocation of resources without proper limits or throttling, allows a remote attacker to cause a Denial of Service DoS. By exploiting this, an attacker can consume...

CVE-2026-58346

A flaw was found in Moodle. A site administrator could exploit a blind Server-Side Request Forgery SSRF vulnerability. This vulnerability exists in the MNet peers management functionality due to insufficient validation of peer hostnames against the cURL blocked hosts configuration. This could all...

CVE-2026-58344

A flaw was found in Moodle. The regrade action in the quiz overview report did not include the necessary token, leading to a Cross-Site Request Forgery CSRF vulnerability. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, such as regrading...

CVE-2026-58345

A flaw was found in Moodle. Insufficient capability checks in the Assignment module allowed users without the necessary permissions to allocate markers to submissions. This vulnerability could lead to unauthorized modification of assignment data, effectively granting a limited form of privilege...

CVE-2026-58343

A flaw was found in Moodle. Capability checks were missing from course assistance AI Artificial Intelligence placement web services. This could allow users to make requests to these web services without possessing the necessary permissions, potentially leading to unauthorized access to AI course...

CVE-2026-58341

A flaw was found in Moodle. The actions to enable and disable group messaging did not include the necessary token to prevent a Cross-Site Request Forgery CSRF risk. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, potentially leading to...

CVE-2026-64243

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ASoC simple-mux audio codec. A local user or process with access to the ALSA sound control interface could exploit an incorrect bounds check in the simplemuxcontrolput function. This vulnerability allows an attacker to store...

CVE-2026-48586

A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data also known as data amplification, allows a remote attacker to cause a Denial of Service DoS by sending specially crafted, highly compressed data. The affected component fails to...

CVE-2026-58348

A flaw was found in Moodle. Missing capability checks in the report builder fragment callbacks could allow authenticated users to retrieve report data that they are not authorized to access. This could lead to information disclosure...

CVE-2026-55969

A flaw was found in Apache Thrift's C++, cglib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted input. The flaw can lead to the affected service becoming unavailable...

CVE-2026-50251

A flaw was found in Unbound. A remote malicious actor can exploit a vulnerability by controlling a DNS delegation that returns specific glue records. This can cause Unbound to repeatedly clear its DNS caches, leading to a continuous Denial of Service DoS for DNS resolution. Mitigation To mitigate...

CVE-2026-57213

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64252

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...

CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the SpdyHttpDecoder handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated SYNSTREAM frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This...

CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

CVE-2026-17072

A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being...

CVE-2026-64249

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

CVE-2026-59888

A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an...

CVE-2026-51300

A flaw was found in SQLite. This use-after-free vulnerability exists in the expression parsing and memory management logic. A remote attacker can exploit this by crafting malicious SQL queries, which leads to invalid memory access. This can result in an application crash and the leakage of...

CVE-2026-64247

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine Hyper-V component. A local attacker with access to a KVM guest could exploit this by providing an out-of-range Virtual Processor VP ID during a paravirtual Translation Lookaside Buffer TLB flush. This could lead to an...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

CVE-2026-53667

A flaw was found in React Router. The RSCErrorHandler component, used in applications leveraging unstable React Server Components RSC Application Programming Interfaces APIs, is missing crucial protocol validation. This vulnerability allows an attacker to redirect users to untrusted external...

CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...