CVE-2026-116674

A flaw was found in systeminformation. When processing network statistics on BSD-based systems, caller-controlled interface names are improperly handled during internal cache lookups. An attacker capable of supplying input to the network statistics function can trigger prototype pollution,...

CVE-2026-116632

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI...

CVE-2026-114731

A flaw was found in Roundcube Webmail. This flaw allows a remote attacker to trigger a Denial of Service DoS by exhausting server memory. The application's stylesheet proxy fails to enforce size limits or read timeouts when retrieving external content. By directing the proxy to fetch an...

CVE-2026-114729

A flaw was found in Roundcube Webmail. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing Scalable Vector Graphics SVG animations with an unvalidated animation attribute. The application's HTML sanitizer fails to inspect this attribute for remote...

CVE-2026-114726

A flaw was found in Roundcube Webmail. This vulnerability allows a remote attacker to inject arbitrary email headers by sending an email containing encoded carriage return and line feed CRLF control characters within the sender display name. When an affected user bounces or resends the message, t...

CVE-2026-116590

A flaw was found in snappy-java. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the Java Virtual Machine JVM. The issue occurs because memory copying routines fail to validate array bounds and buffer lengths before passing them to native memory operations. By...

CVE-2026-116498

A missing authorization flaw was found in Kiali, where the namespace health, ztunnel pod log, and ztunnel configuration dump API endpoints returned data about namespaces the caller had no RBAC access to, reading ztunnel data with the Kiali ServiceAccount without checking the caller's permissions...

CVE-2026-116053

A flaw was found in mycli. A local attacker can execute arbitrary operating system commands by supplying crafted input that bypasses safety checks in the special command whitelist. This allows malicious commands to run with the permissions of the user running the application. Mitigation Avoid...

CVE-2026-115823

A flaw was found in Starman. The web server improperly sends message bodies for HTTP responses that should contain headers only, such as HEAD requests and certain status codes. A remote attacker can exploit this behavior over persistent connections to cause HTTP response desynchronization between...

CVE-2026-114728

A flaw was found in Roundcube Webmail. The HTML message sanitizer fails to properly normalize all valid CSS escape sequences when inspecting external resource attributes. A remote attacker can exploit this flaw by sending a crafted email that bypasses remote content blocking, causing external...

CVE-2026-115722

A flaw was found in RPly. The parser improperly validates property definitions in file headers, allowing invalid list types to trigger out-of-bounds function calls. An attacker could exploit this vulnerability by tricking a user into opening a specially crafted Polygon File Format PLY file...

CVE-2026-114719

A flaw was found in Roundcube Webmail. A remote attacker could conduct a Cross-Site Request Forgery CSRF attack to alter email classifications without user consent. By enticing an authenticated user into following a malicious link, the attacker exploits improper parameter handling in the markasju...

CVE-2026-114725

A flaw was found in Roundcube Webmail. The application fails to properly sanitize newline characters in specific email header fields, including References, In-Reply-To, Message-ID, and From parameters. A remote authenticated attacker can exploit this vulnerability to inject arbitrary headers into...

CVE-2026-114717

A flaw was found in roundcubemail. When forwarding an email as an attachment, the application uses the original message's subject line directly to construct the attachment name without properly sanitizing line breaks. A remote attacker can exploit this vulnerability by sending an email containing...

CVE-2026-114714

A flaw was found in Roundcube Webmail. When using the squirrelmailusercopy plugin with a file-based backend, the application constructs file paths from user login names without properly sanitizing path separators. An authenticated remote attacker can exploit this path traversal vulnerability by...

CVE-2026-114655

A flaw was found in libmongocrypt. The library constructs requests to external Key Management Service KMS providers without properly validating or encoding values sourced from key vault documents, provider configurations, or service responses. An attacker with write access to the key vault...

CVE-2026-112381

A flaw was found in Apache Traffic Server. A race condition can allow an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the server. This vulnerability occurs when a client terminates a POST request connection while the server is processing a chunked origin response,...

CVE-2026-111817

A flaw was found in Apache Traffic Server. When configured to drop HTTP chunked trailers, the proxy incorrectly waits for data bytes that it has already discarded, stalling the transfer until the connection times out. A remote attacker can exploit this condition by sending chunked transfers,...

CVE-2026-98998

A flaw was found in the Linux kernel's TH1520 HDMI bridge driver. During device removal, the driver's teardown callback retrieves driver private data using an incorrect data structure type and passes an invalid pointer to the cleanup routine. A local privileged user could trigger this issue when...

CVE-2026-98997

A flaw was found in the Linux kernel's AMDGPU graphics driver. In the user queue implementation, the driver fails to verify whether a buffer object was designated for queue doorbells before placing it in the doorbell domain. A local user can exploit this vulnerability by submitting a shared memor...

CVE-2026-98994

A flaw was found in the Linux kernel. A local user could exploit a race condition in the statmount facility to cause a use-after-free condition, resulting in a kernel crash and Denial of Service DoS. When querying an unmounted filesystem mount via an open file descriptor, the kernel fails to...

CVE-2026-98995

A flaw was found in the Linux kernel. A local user can cause a denial of service DoS or potentially escalate privileges by triggering a use-after-free condition in the mount namespace subsystem. When moving file system mount points, the kernel fails to clear a reference pointer on the former pare...

CVE-2026-98992

A flaw was found in the Linux kernel. When performing a recursive bind mount on a lazily unmounted namespace or process file held open by a file descriptor, the kernel fails to verify that the mount tree is still active. A local user could exploit this vulnerability to duplicate and access...

CVE-2026-98993

A flaw was found in the Linux kernel's mount namespace subsystem. A local attacker can trigger an unmount flag inheritance issue when cloning a lazily unmounted mount that is kept open by a file descriptor. This improper flag inheritance leads to incorrect reference counting and a use-after-free...

CVE-2026-98991

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service DoS by triggering a use-after-free flaw, which occurs when the system accesses memory after it has been released. During certain unmount operations, the kernel fails to verify whether a filesystem mount is alread...

CVE-2026-95664

A flaw was found in the Apache Camel camel-aws2-s3 component. An attacker with permission to upload or name objects in an Amazon Simple Storage Service Amazon S3 bucket consumed by a Camel route can provide a crafted object key containing expression language syntax. When the component processes t...

CVE-2026-93236

A flaw was found in the Linux kernel's Meson video decoder driver. When processing video format negotiation requests with an unsupported format on the output queue, the driver improperly falls back to a format that may not be supported by the platform format table. This issue leads to a NULL...

CVE-2026-93224

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to improper error handling during connection cleanup in the Remote Direct Memory Access RDMA server subsystem. When a connection accept operation fails before registration completes, the kernel...

CVE-2026-93223

A flaw was found in the Linux kernel's Tegra video driver, which can lead to a Denial of Service DoS. When parsing video input channels, the driver improperly drops an object reference during error handling without having previously acquired it. A local user could exploit this vulnerability by...

CVE-2026-93221

A flaw was found in the Linux kernel's NFS daemon nfsd. A race condition occurs when multiple internal processes concurrently access the graceended flag without proper synchronization. This can lead to memory corruption, including double-free vulnerabilities and attempts to read from freed memory...

CVE-2026-90028

A flaw was found in the Linux kernel's usb: typec: hd3ss3220 driver. This vulnerability occurs because the regulatorisenabled function reports the overall power regulator state rather than the state specific to a particular consumer. If another component enables the VBUS Voltage Bus first, the...

CVE-2026-89976

A flaw was found in the Linux kernel's accel/ethosu component. This vulnerability occurs due to improper handling of job completion fences, where an uninitialized fence can be leaked or a zeroed reference count is passed to the dmafenceput function. A local attacker could potentially exploit this...

CVE-2026-89939

A flaw was found in the Linux kernel's iio: chemical: atlas-sensor driver. This vulnerability occurs when the atlasbufferpostenable function acquires a Power Management PM reference but fails to release it if an interrupt setup operation atlassetinterrupt does not complete successfully. This...

CVE-2026-89935

A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306readdata function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from enteri...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

CVE-2026-89934

A flaw was found in the Linux kernel's ltrf216a driver, which manages light sensors. When the system attempts to read data from the sensor, a power management PM reference is acquired. If the data reading operation fails, this reference is not properly released. This oversight leads to an...

CVE-2026-89830

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. When the system attempts to allocate new data blocks, it may incorrectly increment the count of valid blocks without properly reversing this action if the allocation process fails. This oversight leads to a...

CVE-2026-82983

A flaw was found in Nextcloud Tables. The application fails to properly verify that a requesting user has management permissions before returning table share details. An authenticated user with read-only access can exploit this flaw by directly querying the share-listing endpoint, leading to...

CVE-2026-58496

A flaw was found in ThorVG. The vector graphics engine's font loader does not verify that an input buffer contains the minimum required data before attempting to inspect font headers. An attacker could exploit this flaw by enticing an application to load a specially crafted, undersized font...

CVE-2026-98965

A flaw was found in the Linux kernel's Intel Ethernet ice driver. The packet transmission path uses relaxed memory-mapped I/O MMIO write ordering when updating hardware doorbells on certain processor architectures. This flaw introduces a race condition where the network interface card processes...

CVE-2026-98975

A flaw was found in the Linux kernel's XFS file system. A local user could exploit this flaw to cause data corruption across shared files during file exchange operations. When exchanging file storage mappings, the kernel may improperly clear the reference link reflink flag that marks blocks as...

CVE-2026-99033

A flaw was found in the Linux kernel. A local user with network privileges can trigger a Denial of Service DoS by causing a complete system crash. This issue occurs when a packet socket receives traffic on a network interface that lacks a link-layer header, such as a Controller Area Network CAN...

CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

CVE-2026-98954

A flaw was found in the Linux kernel's networking subsystem. Due to improper validation of Generic Segmentation Offload GSO packets during virtio network header processing, packets with malformed headers or certain IP options can bypass flow dissection and leave transport headers uninitialized. A...

CVE-2026-98971

A flaw was found in the Linux kernel's Exar GPIO General Purpose Input/Output driver. A local user could cause a Denial of Service DoS when device initialization error handling triggers cleanup before the newly allocated device identifier is saved. Because the identifier is not yet stored, the...

CVE-2026-99099

A flaw was found in the Linux kernel. On systems running affected AMD processors without microcode fixes, the processor may fail to properly clear cached entries in the Translation Lookaside Buffer TLB, a hardware cache used to speed up memory address translation, during flush operations. A local...

CVE-2026-98964

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe target subsystem. When handling peer-to-peer P2P memory requests, an allocation failure during metadata processing causes the cleanup handler to reference an unassigned device structure. An attacker could exploit this flaw to...

CVE-2026-98955

A flaw was found in the Linux kernel. An integer truncation issue in the network flow dissector component occurs when calculating transport header offsets for network packets exceeding 64 kilobytes. An attacker could exploit this flaw by transmitting specially sized network frames, causing the...

CVE-2026-99031

A flaw was found in the Linux kernel's network bridge subsystem. When cleaning up multicast port entries, the kernel executes recursive function calls that consume a new stack frame for each port being removed. An attacker capable of triggering the removal of a large number of multicast ports can...

CVE-2026-98961

A flaw was found in the Linux kernel's Btrfs file system. A local attacker can cause a Denial of Service DoS by triggering error conditions during asynchronous read operations. When an iouring read request fails, such as during a memory allocation failure, the kernel does not release acquired...