CVE-2026-99091

A flaw was found in the Linux kernel's Bluetooth subsystem. When pending management commands are flushed during an adapter power-off or device removal event, the kernel incorrectly reports command status values using internal memory pointer data instead of the intended error code. A local user ca...

CVE-2026-120420

A denial-of-service vulnerability was found in the Drools DRL expression parser org.drools:drools-drl-parser. The ANTLR4-generated DRL expression grammar parses parenthesised sub-expressions through mutually recursive descent rules with no limit on nesting depth. When a deeply nested parenthesise...

CVE-2026-99195

A flaw was found in the Linux kernel's OpenCores Ethernet driver ethoc. During device initialization, the driver connects the physical network interface before assigning its network device operations. A local attacker capable of triggering device probing on a system configured with network traffi...

CVE-2026-99180

A flaw was found in the Linux kernel's Unicode subsystem. This issue occurs because character mapping tables used for case-insensitive file lookups are freed immediately upon unmounting a filesystem without waiting for active path lookups to complete. A local user could exploit this race conditio...

CVE-2026-99177

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability may lead to a Denial of Service DoS due to improper locking when marking guest memory pages as modified during AMD Secure Encrypted Virtualization SEV operations. A local user with permissions to...

CVE-2026-109088

A flaw was found in libXtst. A malicious X server can send malformed RECORD EnableContext replies to a connected client. When processing these malformed responses, the client enters an infinite loop, resulting in a Denial of Service DoS condition where the application becomes unresponsive...

CVE-2026-107457

A flaw was found in Qt. Under certain MQTT version 5 MQTT 5 connection settings between a client and a server, the QMqttClient class can corrupt memory. A remote attacker could exploit this vulnerability to crash the affected application, resulting in a Denial of Service DoS. Mitigation Configure...

CVE-2026-118016

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-118014

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-118013

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Images, Video, and HTML Frames component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are...

CVE-2026-118012

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Animation component...

CVE-2026-118010

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Disability Access APIs component...

CVE-2026-118011

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the CSS Parsing and Computation component...

CVE-2026-118009

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow, use-after-free in the Graphics: Text component...

CVE-2026-118008

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-118007

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-100140

A flaw was found in Qt. An integer overflow vulnerability exists in the XML Extensible Markup Language parsing functionality within the QXmlSimpleReader component. A local attacker could exploit this flaw by enticing a user or application to process specially crafted XML input. Successful...

CVE-2026-99201

A flaw was found in the Linux kernel's netlink subsystem. An unprivileged local user can exploit this vulnerability by manipulating netlink sockets with chosen port identifiers and observing exposed table bucket order. This flaw results in an information disclosure, allowing an attacker to infer...

CVE-2026-99191

In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payloadlen in calipsoskbuffsetattr calipsoskbuffsetattr adjusts payloadlen by the length of the option it inserts or resizes: payload = ntohsip6hdr-payloadlen; ip6hdr-payloadlen = htonspayload + lendelta; GR...

CVE-2026-99196

A flaw was found in the Linux kernel's Au1000 ethernet driver. During device probing with network traffic shaping enabled, the driver attempts to access network operations before they are assigned. This flaw allows a local user or hardware attachment event to trigger a null pointer dereference,...

CVE-2026-62864

A flaw was found in Ring. A remote attacker can cause a Denial of Service DoS by sending HTTP requests with specially crafted parameter names to applications using the wrap-nested-params middleware. The middleware relies on an inefficient regular expression that experiences excessive backtracking...

CVE-2026-111959

A flaw was found in arrow. Improper validation of RunEndEncoded run-end encoded arrays in the ArrayData interface allows an attacker to read data beyond the bounds of the child values array by supplying specially crafted data. This out-of-bounds read flaw may lead to information disclosure or a...

CVE-2026-105608

A flaw was found in HashiCorp Consul. An authenticated user with service write permissions can bypass authorization controls during service mesh proxy registration. By applying custom Envoy proxy configurations without possessing required mesh write privileges, an attacker can alter proxy setting...

CVE-2026-105626

A flaw was found in HashiCorp Consul. An unauthenticated remote attacker can exploit this vulnerability through the HTTP Application Programming Interface API to cause excessive memory consumption on a Consul agent. Successful exploitation leads to memory exhaustion and results in a Denial of...

CVE-2026-101678

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability across the network by enticing a user to interact with malicious requests. A successful attack allows the attacker to cause a partial Denial of Service DoS, leading to temporary service...

CVE-2026-105765

A flaw was found in HashiCorp Consul. An authorization bypass vulnerability in the agent's service mesh leaf certificate API allows an attacker without a valid Access Control List ACL token to retrieve cached service leaf certificates along with their private keys. This could enable an unauthoriz...

CVE-2026-120252

A flaw was found in imagecodecs. A stack-based buffer overflow exists in the lossless JPEG parser within the decodejpegsof3 function due to improper validation of Huffman table symbol counts. By enticing a user or application to process a specially crafted lossless JPEG image file, an attacker...

CVE-2026-120251

A flaw was found in imagecodecs. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking a user or application into processing a specially crafted CCITT Group 4 fax image stream. An infinite loop in the fax decoding routine causes the process to consume excessive CPU...

CVE-2026-120214

A flaw was found in @fastify/http-proxy. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by bypassing intended proxy routing restrictions. Due to improper path validation that processes backslashes before decoding request paths, encoded backslashes and...

CVE-2026-101677

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to interact with a malicious service across the network. A successful attack can result in unauthorized modification, insertion, or deletion of accessible data...

CVE-2026-114715

A flaw was found in Roundcube Webmail. This vulnerability allows an authenticated remote user to take over another account through unauthorized password modification. When a password change is requested, the Modoboa driver in the password plugin selects the first account returned by the API searc...

CVE-2026-119566

A flaw was found in Prometheus. This vulnerability allows an attacker who controls a configured remote write endpoint or redirecting server to cause an information disclosure. By returning an HTTP redirect response to an arbitrary host, the server can induce Prometheus into forwarding sensitive...

CVE-2026-117556

A flaw was found in zchunk. This vulnerability allows a remote attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted file. Improper boundary checking during file header parsing causes the program to read beyond the allocated memory buffer, leadin...

CVE-2026-120216

A flaw was found in Fastify. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a request to a streaming endpoint when a custom handler timeout is configured. If a streaming response remains open past the configured timeout after response headers have already been sen...

CVE-2026-99189

A flaw was found in the Linux kernel's General-Purpose Input/Output GPIO MXC driver. This vulnerability can result in a Denial of Service DoS through a system crash if an interrupt arrives while the device is initializing. Because the interrupt handler is registered before its required data...

CVE-2026-99186

A flaw was found in the Linux kernel's x86 instruction evaluation component. A local user can exploit this vulnerability to cause a Denial of Service DoS by executing instructions with segment register overrides that trigger an infinite loop during instruction decoding. This condition traps the...

CVE-2026-109090

A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...

CVE-2026-109089

A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...

CVE-2026-116259

A flaw was found in libimobiledevice. A local attacker can trigger this vulnerability by supplying a manipulated value argument to the afcgetdeviceinfokey function in the device information handler. This issue leads to memory corruption, which can result in application crashes or a Denial of...

CVE-2026-116258

A flaw was found in libimobiledevice. A remote attacker can trigger a heap-based buffer overflow in the Apple File Conduit AFC component by sending specially crafted requests. Successful exploitation may result in a Denial of Service DoS through an application crash or memory corruption. Mitigati...

CVE-2026-99202

A flaw was found in the Linux kernel's libsas subsystem, leading to a denial of service DoS. When resuming a host adapter connected to an expander-attached storage drive, an internal deadlock condition can occur while executing management commands. A local user can trigger this vulnerability duri...

CVE-2026-99193

A flaw was found in the Linux kernel's Texas Instruments PRU Ethernet driver. A local user capable of triggering network device initialization can cause a Denial of Service DoS by crashing the operating system. When the network interface is probed on a system with network traffic shaping enabled,...

CVE-2026-99192

A flaw was found in the Linux kernel's Broadcom GENET bcmgenet ethernet driver, which can lead to a Denial of Service DoS. When handling shared network packet buffers, the driver overwrites control block metadata while earlier packets are still pending in the transmission ring. This issue causes...

CVE-2026-99187

A flaw was found in the Linux kernel. During Central Processing Unit CPU hotplug operations, the Performance Monitoring Unit PMU context migration prematurely stops processing event groups after removing a leader, leaving active events running on the departing processor. A local user running...

CVE-2026-99183

A flaw was found in the Linux kernel's Rocket accelerator driver. When unbinding an accelerator core while workloads are actively executing, the driver fails to properly search all remaining core slots during scheduler lookups, resulting in an unchecked null reference. A privileged local user cou...

CVE-2026-99181

A flaw was found in the Linux kernel's autofs automount file system subsystem. A local attacker can cause a Denial of Service DoS by initiating file system lookups while the automount daemon is restarting. Due to mishandled errors from an obsolete communication pipe, the kernel incorrectly shuts...

CVE-2026-119281

A flaw was found in MariaDB Connector/J. The database connector fails to properly validate changes to the result character set and incorrectly assumes all returned data is UTF-8 encoded. A malicious database server or an attacker intercepting network communication a machine-in-the-middle attacker...

CVE-2026-119277

A flaw was found in MariaDB Connector/J. This vulnerability can lead to a Denial of Service DoS because packet decoders do not verify that sufficient data remains in the receive buffer before reading server-specified lengths. A compromised database server or an attacker positioned between the...

CVE-2026-118761

A flaw was found in Kubeflow Pipelines. The API server does not properly restrict the size of decompressed data when processing uploaded archive files, performing decompression before authorization checks are completed. A remote, unauthenticated attacker could exploit this vulnerability by...

CVE-2026-118759

A flaw was found in Kubeflow Pipelines. An unauthenticated remote attacker with access to the API server can retrieve execution logs without proper authorization checks. By submitting requests with known workflow run and pod identifiers, an attacker can access live or archived logs from targeted...