CVE-2026-117880

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XML component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-117878

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue, use-after-free in the Storage: IndexedDB component...

CVE-2026-117877

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...

CVE-2026-117875

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Scrolling and Overflow component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided a...

CVE-2026-117874

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Internationalization component...

CVE-2026-118021

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the XPCOM component...

CVE-2026-118006

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the WebRTC: Signaling component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as...

CVE-2026-118345

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574061024...

CVE-2026-118337

An improper access control flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569286605...

CVE-2026-118333

A missing authorization flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/571147583...

CVE-2026-99135

A flaw was found in the Linux kernel's Device Mapper integrity dm-integrity subsystem. When processing storage discard requests under low-memory conditions with large integrity tag sizes, an error-handling path fails to properly advance the processing loop. A local user could exploit this conditi...

CVE-2026-86983

A flaw was found in swift-crypto. A remote attacker can trigger a Denial of Service DoS by providing excessively long or unbounded input to an application utilizing the P-384 Verifiable Oblivious Pseudorandom Function VOPRF interface. Because the interface does not adequately restrict input lengt...

CVE-2026-88858

A flaw was found in Grafana. An authenticated user, including one with basic viewer privileges, can cause a Denial of Service DoS by submitting deeply nested mathematical expressions that crash the server. Additionally, an authorized user can incorporate such expressions into alert rules, causing...

CVE-2026-54462

A flaw was found in knative.dev/pkg. The admission webhook handler does not enforce size restrictions on incoming HTTP request bodies. A network client can exploit this vulnerability by submitting an oversized request, causing the controller process to exhaust memory and crash. This results in a...

CVE-2026-99134

A flaw was found in the Linux kernel's mac802154 wireless networking subsystem. This flaw allows an attacker within radio range to cause a Denial of Service DoS by crashing the system. Due to missing synchronization between device association routines and response processing, a race condition can...

CVE-2026-88967

A flaw was found in Grafana. This information disclosure vulnerability allows an authenticated user with permission to query an Azure Monitor data source, including a user with the Viewer role, to cause Grafana to send the data source's Azure access token to an arbitrary destination. An attacker...

CVE-2026-109950

A flaw was found in FreeRDP. This vulnerability allows a malicious or compromised Remote Desktop RD Gateway to cause a Denial of Service DoS by crashing connecting client applications. By transmitting consent or service messages with mismatched length indicators, the gateway triggers an...

CVE-2026-109951

A flaw was found in FreeRDP. When handling dynamic virtual channel requests within the proxy component, the service does not properly verify that incoming channel names are null-terminated. A malicious backend Remote Desktop Protocol RDP server can exploit this issue by sending a specially crafte...

CVE-2026-109941

A flaw was found in FreeRDP. When processing Remote Desktop RD Gateway connections using HTTP chunked transfer encoding, a malicious or compromised server can send a partial chunk header or footer followed by a clean Transport Layer Security TLS shutdown. This condition causes the client to proce...

CVE-2026-109953

A flaw was found in FreeRDP. When connecting using the restricted admin mode option, the client fails to suppress credential delegation, inadvertently transmitting administrative credentials in cleartext to the remote server. A compromised destination host or an on-path attacker can intercept the...

CVE-2026-109952

A flaw was found in FreeRDP. A remote attacker, acting as a malicious server or an on-path attacker, can exploit this flaw to cause information disclosure by intercepting user credentials in cleartext. Due to missing validation during connection negotiation, the client accepts unapproved security...

CVE-2026-109679

A flaw was found in FreeRDP. A malicious or compromised remote desktop gateway can cause a Denial of Service DoS by returning a response with an empty body during connection negotiation. When processing the response from an Azure Resource Manager ARM endpoint, the client fails to verify that the...

CVE-2026-99133

A flaw was found in the Linux kernel's IUCV Inter-User Communication Vehicle networking subsystem. A local attacker can exploit this flaw to cause a Denial of Service DoS through a kernel crash or unexpected socket disconnection. The vulnerability is triggered when processing message receive...

CVE-2026-109945

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by crashing the connecting client application. When a user connects to a server with smartcard emulation enabled, the server can issue concurrent disconnect and transmit...

CVE-2026-118425

A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solution. The issue occurs when the policy is configured to allow loopback addresses, as Keycloak resolves hostnames via DNS during validation. An attacker can bypass domain allowlis...

CVE-2026-99132

A flaw was found in the Linux kernel's XFS file system. A local attacker could cause a Denial of Service DoS by triggering a deadlock during file system metadata synchronization. Under specific conditions, such as a file system shutdown during a synchronous transaction commit, held buffer locks...

CVE-2026-89793

A flaw was found in the Linux kernel's ublk subsystem. An unprivileged userspace daemon can exploit this by mapping a read-only ublk character device's command buffer, then elevating its permissions to write access. This allows the daemon to corrupt critical kernel-written data within the command...

CVE-2026-89803

A flaw was found in the Linux kernel's drm/nouveau driver. During the channel teardown process, the channel-kill event subscription is not properly unsubscribed before its associated fence context is freed. This creates a narrow window where a kill event can be delivered to an already freed fence...

CVE-2026-89801

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. A local attacker could exploit a use-after-free vulnerability by triggering a premature region free during a failed OPUNMAPSPARSE operation. This occurs because certain failure paths do not properly clear a region pointer, leading...

CVE-2026-115522

A flaw was found in the FileArtifactService component of Google Agent Development Kit ADK. The service fails to isolate stored files by application name when constructing directory paths on disk. This issue allows a user in one application to access, overwrite, or delete stored files belonging to...

CVE-2026-89922

A flaw was found in the Kernel-based Virtual Machine KVM for the s390 architecture within the Linux kernel. A concurrency issue exists in the importwpinfo function when importing watchpoint data. If a memory slot update occurs concurrently without the required locks being held, the memory slot...

CVE-2026-89940

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem. The iiodmafence implementation uses a lock embedded in iiodmabufpriv. However, iiodmafence can outlive iiodmabufpriv, leading to a use-after-free vulnerability. This can result in memory corruption and potentially lead to system...

CVE-2026-99131

A flaw was found in the XFS file system in the Linux kernel. An improper capability check verified a task's real credentials instead of its effective credentials, causing the system to treat certain attribute modifications as privileged. A user, particularly when modifying file ownership over a...

CVE-2026-89916

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. This vulnerability involves a race condition during Translation Lookaside Buffer TLB invalidation. Specifically, one virtual CPU vcpu could attempt to insert a TLB entry for a page that another vcpu h...

CVE-2026-118384

A flaw was found in mtools. This out-of-bounds write vulnerability allows an attacker to cause a Denial of Service DoS or corrupt memory. By tricking a user into processing a specially crafted disk image containing malformed VFAT directory entries, the application writes beyond allocated buffer...

CVE-2026-90037

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A race condition exists during the cleanup of NFSv4 client connections, specifically when the system attempts to reclaim resources from timed-out clients. This can lead to a use-after-free vulnerability, where the system trie...

CVE-2026-89997

A flaw was found in the Linux kernel's device mapper dm component. A local attacker could exploit a race condition between the resume and remove input/output control ioctl operations. This could lead to a use-after-free vulnerability, potentially allowing for arbitrary code execution or denial of...

CVE-2026-90000

A flaw was found in the Linux kernel's hid-rmi driver. A malicious or specially crafted Human Interface Device HID can provide undersized Remote Memory Interface RMI reports, leading to out-of-bounds memory access. This vulnerability allows for information disclosure, where sensitive heap content...

CVE-2026-90030

A flaw was found in the Linux kernel's DWC3 USB controller driver. When the forceRM bit is incorrectly set during an EndTransfer command, a transfer may remain active even after completion. A subsequent StartTransfer on the same endpoint can then trigger writes to an unmapped memory buffer, leadi...

CVE-2026-90001

A flaw was found in the Linux kernel's HID Human Interface Device BPF Berkeley Packet Filter component. A race condition exists between the device destruction and BPF link release paths, which can lead to a struct hiddevice being freed twice. This double-free vulnerability results in a...

CVE-2026-90014

A flaw was found in the Linux kernel's tracing subsystem. The showeventfilters and showeventtriggers files, which display event filters and triggers, do not correctly maintain a reference to the trace array. This allows the trace array to be freed while a user is actively reading these files...

CVE-2026-90013

A flaw was found in the Linux kernel's tracing subsystem. When an options file is opened, it fails to properly manage references to the associated trace array. This oversight allows a local attacker to trigger a use-after-free condition by removing the trace array instance while the options file ...

CVE-2026-89968

A flaw was found in the nvmet-tcp component of the Linux kernel. A remote attacker can exploit this vulnerability by sending an unsolicited H2CData PDU Protocol Data Unit before the target transmits an R2T Ready To Transfer for a write command. This can cause the command to be completed twice,...

CVE-2026-117608

A flaw was found in assimp. An attacker can exploit an integer overflow in the MD2 file parser by providing a specially crafted 3D model file with manipulated header values. When processed, this vulnerability triggers an out-of-bounds memory read, resulting in a Denial of Service DoS through an...

CVE-2026-93009

A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming the pointer is still inside the option. An attacker on the local network can trigger this with a single DHCPv6 packet. T...

CVE-2026-93010

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The...

CVE-2026-99123

A flaw was found in the Linux kernel's Virtual Sockets vsock virtio transport. Incoming packets for connecting sockets are not properly validated against their expected source address. A local, unprivileged attacker can exploit this vulnerability by sending crafted packets during connection setup...

CVE-2026-99130

A flaw was found in the Linux kernel's iouring subsystem. A local attacker can exploit this vulnerability to cause a Denial of Service DoS by triggering an infinite loop during process exit. This issue occurs when an exiting task attempts to cancel requests on an iouring ring with pending work th...

CVE-2026-99129

A flaw was found in the Linux kernel. A local user could exploit a time-of-check to time-of-use TOCTOU race condition during Security-Enhanced Linux SELinux permission checks for Berkeley Packet Filter BPF tokens. By altering a token file descriptor between kernel lookups, an attacker could bypas...

CVE-2026-91920

A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allowing a specifically crafted 15-digit chunk size ...