CVE-2026-109944

A flaw was found in FreeRDP. When smartcard emulation and redirection are enabled, a malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by crashing the connecting client. This issue occurs because FreeRDP fails to remove card handles when releasing a smartcard emulatio...

CVE-2026-109943

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by causing a connecting client to crash. When asynchronous update processing is enabled, sending specially crafted polygon drawing orders can cause a double-free memory error during...

CVE-2026-109940

A flaw was found in FreeRDP. An attacker who supplies a malicious or compromised Public-Key Cryptography Standards PKCS11 token can cause a Denial of Service DoS by crashing the client application. During key enumeration, FreeRDP processes key identifier attributes into a fixed-size stack buffer...

CVE-2026-109939

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can cause a Denial of Service DoS by crashing the client application during connection establishment. By sending a specially crafted bitmap cache order before connection initialization completes, the server...

CVE-2026-109680

A flaw was found in FreeRDP. A heap-based buffer overflow can result in a Denial of Service DoS when handling redirected user credentials. A malicious or compromised routing service can supply an excessively long redirected username, causing memory corruption in the command-line prompt buffer whe...

CVE-2026-109678

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending a specially crafted smartcard status request to a connecting client. When smartcard emulation is active and the client is built with verbose assertions enabled, processing this...

CVE-2026-99084

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by stalling lock acquisition on a shared nullfs directory. Because root inodes in empty mount namespaces are shared across independent users and kernel threads, delaying directory iteration blocks subsequent file...

CVE-2026-98904

A flaw was found in the Linux kernel's i.MX mailbox driver. The driver prematurely registers the mailbox controller before completing runtime power management setup during device probing. A local user could exploit this race condition by interacting with the incompletely initialized device,...

CVE-2026-99056

A flaw was found in the Linux kernel's stream parser component. A race condition occurs when stopping the stream parser while socket receive operations are still actively executing. A local attacker could exploit this timing issue to cause a use-after-free memory error, potentially leading to...

CVE-2026-116723

A flaw was found in FLTK. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted BMP or ICO image file. The issue occurs due to a stack-based buffer overflow when parsing image headers with an...

CVE-2026-116748

A flaw was found in Transmission. This vulnerability allows a remote attacker to execute arbitrary code, modify application settings, or delete data by exploiting an overly permissive Cross-Origin Resource Sharing CORS policy in the remote procedure call RPC server. By tricking a user into visiti...

CVE-2026-116724

A flaw was found in FLTK. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted BMP or ICO image file. Due to an integer overflow when calculating image dimensions, the application allocates an undersized memory buffer...

CVE-2026-116588

A flaw was found in dd-trace-py. The default regular expression used for query-string obfuscation can encounter excessive backtracking when processing input for HTTP tracing metadata. A remote attacker can exploit this vulnerability by submitting specially crafted URL query strings, resulting in...

CVE-2026-116584

A flaw was found in seroval. A remote, unauthenticated attacker can trigger a Denial of Service DoS by supplying a crafted serialized payload containing a manipulated array length. Because the deserialization routines do not verify that an array node contains a valid list of elements, the...

CVE-2026-116581

A flaw was found in seroval. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted input to an application that deserializes untrusted data. Due to improper validation of sequence node indices during deserialization, consuming the crafted input creates an infinit...

CVE-2026-116580

A flaw was found in seroval. During deserialization, the process of converting serialized data back into live objects, the library fails to properly validate internal stream sources. A remote attacker can exploit this issue by supplying crafted input that reuses object identifiers, causing the...

CVE-2026-115912

A flaw was found in vLLM. In scale-out deployments utilizing shared-memory multimodal caching, worker nodes fail to validate shared-memory references provided in incoming requests. An authenticated remote attacker can exploit this vulnerability by submitting forged memory references pointing to...

CVE-2026-116576

A flaw was found in systeminformation. On Windows systems, the library's input sanitization removes standard quotation marks but fails to filter Unicode quotation marks when constructing PowerShell commands. An attacker who can supply input to an application using this library can exploit this fl...

CVE-2026-112655

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2026-115915

A flaw was found in vLLM. The application processes user-supplied image data without restricting accepted file formats or verifying that the content matches the declared media type. A remote attacker can exploit this vulnerability by submitting a specially crafted image, such as an Encapsulated...

CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

CVE-2026-115748

A flaw was found in Apache Vysper. Its implementation of Extensible Messaging and Presence Protocol XMPP In-Band Registration lacks an authentication check. An authenticated remote attacker can exploit this vulnerability to compromise other user accounts on the server. Mitigation --- CME...

CVE-2026-104592

A flaw was found in libosmocore. An out-of-bounds read vulnerability in the Cell Broadcast Service Protocol CBSP message decoder allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted CBSP WRITE-REPLACE messages, an attacker can trigger an invalid memory read,...

CVE-2026-110264

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow of internal IDs can occur. This integer overflow...

CVE-2026-104591

A flaw was found in libosmocore. A buffer overflow vulnerability exists in the osmoiuupcomputepayloadcrc function during payload checksum calculation. A remote attacker could exploit this flaw to crash the application, resulting in a Denial of Service DoS. Mitigation --- CME Mitigation Guidance...

CVE-2026-90885

A flaw was found in Apache Camel's camel-saxon component. A remote attacker can exploit this vulnerability to cause information disclosure by sending specially crafted XML containing external entity declarations to an affected route. The issue occurs because the component's default parser...

CVE-2026-98903

A flaw was found in the Linux kernel's i.MX Messaging Unit MU mailbox driver. A local user could exploit a race condition during channel shutdown to cause a Denial of Service DoS. When a mailbox channel is closed while an interrupt is actively being processed, the receive event can be inadvertent...

CVE-2026-99082

A flaw was found in the Linux kernel. In the KVM Kernel-based Virtual Machine subsystem, the per-virtual CPU vCPU memory-mapped I/O MMIO cache does not properly track active memory slots when switching between normal execution and System Management Mode SMM. A privileged guest user can exploit th...

CVE-2026-107080

A flaw was found in OpenJPEG. An out-of-bounds read and write vulnerability exists in the encoder's discrete wavelet transform processing when handling images with specific tile geometries. An attacker who can supply crafted encoding parameters could exploit this flaw to cause heap memory...

CVE-2026-98902

A flaw was found in the Linux kernel's RAID5 storage driver. A sequence number comparison issue in stripe batch processing fails to account for 32-bit integer wrapping. During extensive storage write operations, the sequence counter may overflow, causing the system to misidentify newer stripe...

CVE-2026-99083

A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. When handling compounded SMB requests during Kerberos authentication, the server incorrectly calculates available buffer space, leading to a heap-based out-of-bounds write. A remote attacker could exploit this...

CVE-2026-89078

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, a double free can occur when parsing a pattern that fails after an alternation. This double free causes memory...

CVE-2026-93577

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

CVE-2026-97229

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

CVE-2026-115369

A flaw was found in OpenBao. When processing a Certificate Signing Request CSR in the Public Key Infrastructure PKI engine, the service fails to enforce configured IP address restrictions against requested Subject Alternative Names SAN. An authenticated remote user with certificate signing...

CVE-2026-115360

A flaw was found in OpenBao. An open redirect vulnerability in the user interface for the OpenID Connect OIDC identity provider allows a remote attacker to redirect unauthenticated users to arbitrary, attacker-controlled websites. By convincing a victim to follow a crafted OIDC link, an attacker...

CVE-2026-80728

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During device teardown, a timing issue can occur where memory used by the driver is released prematurely. This can happen during a device probe failure or rollback. This premature release leads to the driver attempting to write to an...

CVE-2026-98897

A flaw was found in the Linux kernel's ksmbd Kernel Server Message Block daemon. An authenticated remote user can cause a Denial of Service DoS by initiating conflicting file access requests on cached file leases. Because ksmbd holds an internal read lock while waiting for a lease break...

CVE-2026-99081

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver, which can lead to a Denial of Service DoS. When transmitting small network packets that require padding, the driver fails to update the Direct Memory Access DMA mapping length to account for the padded size. As a...

CVE-2026-98900

A flaw was found in the Linux kernel's Xen grant allocation driver. A local user can exploit this vulnerability by submitting an excessively large grant allocation request before the driver validates it against global limits. This flaw allows excessive kernel memory consumption and integer...

CVE-2026-98898

A flaw was found in the Linux kernel's AMD GPU driver. When dynamic power management DPM is disabled, the driver attempts to schedule thermal management tasks on an uninitialized work queue upon receiving an interrupt. A local user could exploit this condition to trigger a kernel crash, resulting...

CVE-2026-80838

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. During certain network operations, specifically a filtered bulk flush, the system can incorrectly handle remote entries. This can lead to a memory corruption vulnerability where a read-copy update RCU reader attempts t...

CVE-2026-98896

A flaw was found in the Linux kernel's Thunderbolt driver. A race condition can occur when a device hotplug event is processed concurrently with driver removal, resulting in a use-after-free condition where freed memory is accessed. A local user could exploit this flaw to cause a Denial of Servic...

CVE-2026-93237

A flaw was found in the Linux kernel. An incorrect physical memory boundary check on LoongArch systems allows device memory allocations to fall outside the supported virtual memory mapping space. When the kernel attempts to map this out-of-bounds memory, an address wraparound occurs that silently...

CVE-2026-98894

A flaw was found in the AMD GPU driver within the Linux kernel. When handling overflow conditions in the Common Platform Error Record CPER ring buffer, the driver relies on parsed entry sizes from the buffer contents without verifying that the read pointer advances. Corrupt error record data can...

CVE-2026-98895

A flaw was found in the Linux kernel's mlx5 network driver. When destroying a hardware steering table configured with a default miss table, the driver fails to remove the entry from the associated miss table tracking list, leaving behind an invalid pointer. A local privileged user could exploit...

CVE-2026-99080

A flaw was found in the Linux kernel's file system component. When freeing file index records inodes, the kernel could fail to release unused internal data tracking nodes xarray nodes left behind during memory management operations. A local user could exploit this flaw to cause a persistent kerne...

CVE-2026-99075

A flaw was found in the Linux kernel's Rust Binder driver. When a thread terminates while holding a pending reference count update for an inter-process communication node, the update is improperly dropped instead of being rescheduled. This desynchronizes internal states and prevents userspace fro...

CVE-2026-99070

A flaw was found in the Linux kernel's IPv6 subsystem. When nexthop compatibility mode is enabled, a race condition between sizing and populating route notification buffers can trigger an unexpected kernel warning. A local user could trigger this condition during concurrent route modifications,...

CVE-2026-99068

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA ctxfi driver. When clearing Digital Audio Output DAO input mapping entries, the driver fails to properly free allocated memory. A local user could exploit this vulnerability by repeatedly triggering the operation, causi...