CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2026-72092

A flaw was found in the Linux kernel. A local user could trigger a kernel crash by submitting a command to an AMD XDNA device that does not support the command submission operation. This leads to a Denial of Service DoS...

CVE-2026-78659

A flaw was found in the Go net/http package. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 requests that declare an excessive number of trailer header fields. Because the server bypasses configured header limits when allocating memory for these declarations, an attacker...

CVE-2026-89419

A flaw was found in OpenStack Ironic. A missing authorization check in the node PATCH API allows an authenticated lessee member to change the maintenance state of a bare metal node, an operation that should be restricted to lessee managers and administrators. By sending a PATCH request to...

CVE-2026-90458

A path traversal vulnerability was found in OpenStack Ironic Redfish vendor passthrough subscription management. An authenticated attacker with vendor passthrough privileges could use a crafted subscription id to access or delete arbitrary Redfish resources on a node's BMC. Mitigation There is no...

CVE-2026-101637

A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service DoS. Additionally, exploitation can allow unauthorized data modification, enabling t...

CVE-2026-101629

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges can exploit this vulnerability over the network to cause the database server to hang or crash repeatedly. This issue results in a complete Denial of Service DoS of the affected database service. Mitigation...

CVE-2026-94440

A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...

CVE-2026-98721

A flaw was found in the Linux kernel's Cadence NAND controller driver. The driver registers its interrupt handler before initializing the internal synchronization lock and completion objects. A pending interrupt during initialization can trigger the handler to access this uninitialized state,...

CVE-2026-98083

A flaw was found in the Linux kernel's Btrfs file system. An improper error-handling sequence during RAID stripe extent insertion can prematurely release transaction objects if memory allocation fails. A local user could exploit this flaw to trigger a use-after-free condition, leading to a system...

CVE-2026-96229

A flaw was found in .NET. An overly permissive list of allowed inputs can allow an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and may lead to unauthorized access to confidential application data...

CVE-2026-98090

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. During device initialization, if setup fails, the error-handling path releases the new device without restoring active device pointers...

CVE-2026-98723

A flaw was found in the Linux kernel's NVMe target nvmet subsystem. An uninitialized host identifier in persistent reservation references prevents the target from aborting and draining in-flight input/output I/O requests during a Preempt and Abort operation. A connected NVMe host can trigger this...

CVE-2026-98719

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. This vulnerability occurs due to a double-free issue when memory allocated during virtual machine initialization is freed twice following an initialization failure. A loc...

CVE-2026-98722

A flaw was found in the Linux kernel's block2mtd driver. The driver fails to validate that the erase size module parameter is non-zero before performing a division operation during device initialization. A local user with privileges to modify kernel module parameters can exploit this vulnerabilit...

CVE-2026-98720

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine nested virtualization implementation. This flaw allows an attacker within a nested guest to bypass isolation boundaries and directly access host hardware controls, potentially causing host system instability or a Denial of...

CVE-2026-98724

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe target PCI endpoint function driver. When processing a Scatter-Gather List SGL segment whose length is shorter than a single descriptor, the system fails to properly validate the segment size. A connected host can exploit thi...

CVE-2026-97030

A flaw was found in Go's html/template component. This vulnerability allows cross-site scripting XSS due to improper escaping of the 'yield' keyword during template processing. A remote attacker could exploit this flaw by providing crafted input to an affected template, leading to arbitrary scrip...

CVE-2026-114605

A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...

CVE-2026-65653

A flaw was found in github.com/temporalio/tchannel-go. A remote attacker can exploit this by sending a specially crafted TChannel call fragment that contains checksum metadata but lacks length-prefixed argument chunks. This can lead to a Go slice-bounds panic, causing the hosting process to...

CVE-2026-98707

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition during the teardown of a Receive Block Acknowledgement RX BA session can allow an internal timer to be rearmed after it has been deleted, leaving it queued on freed memory. An attacker within Wi-Fi range could...

CVE-2026-98712

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. The virtual interrupt controller fails to maintain an appropriate reference count on active interrupts, allowing them to be reclaimed and freed while still in use. A malicious guest user could exploit thi...

CVE-2026-98714

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. When virtual machine execution fails, the hypervisor prematurely updates control fields and marks control blocks as clean, assuming hardware operations were performed. A local attacker could...

CVE-2026-98713

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. A malicious guest user can cause a denial of service DoS on the host system by executing specific instructions on hardware lacking Fine-Grained Traps FGT support. Because trap configurations were improper...

CVE-2026-98717

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability allows a local user or guest virtual machine to cause a Denial of Service DoS by crashing the host kernel. The issue stems from a race condition between memory slot creation and stage-2 page faul...

CVE-2026-98706

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user or adjacent attacker could trigger a Denial of Service DoS resulting in a system crash. This issue arises from a race condition during the removal of an access point AP or mesh station, where background power-save...

CVE-2026-108398

A flaw was found in .NET Framework. An untrusted search path vulnerability allows an authenticated local attacker to bypass security features. By placing a malicious file in a search directory used by the application, an attacker can trick the system into loading unauthorized resources, potential...

CVE-2026-102869

A flaw was found in .NET and Visual Studio. A remote attacker could achieve privilege escalation by exploiting a type confusion vulnerability, which occurs when the software accesses a resource using an incompatible data type. Successful exploitation requires user interaction and may allow an...

CVE-2026-101786

A flaw was found in the MySQL Server Optimizer component. A remote attacker with high privileges and network access via multiple protocols can exploit this vulnerability. Successful attacks can result in an unauthorized takeover of the MySQL Server or MySQL Cluster...

CVE-2026-70174

A flaw was found in .NET. An improperly implemented security check allows an unauthorized remote attacker to execute arbitrary code over the network. Successful exploitation requires user interaction and could allow an attacker to compromise the affected system. Mitigation Do not open untrusted X...

CVE-2026-75507

A flaw was found in GraphQL-core. An unauthenticated remote attacker could cause a Denial of Service DoS by submitting a specially crafted query with nested inline fragments. During query validation, repeated field comparisons consume excessive CPU resources before complexity limits can be...

CVE-2026-112085

A flaw was found in webpack-dev-server. When configured to forward WebSocket connections through a proxy, the server does not validate incoming Host or Origin headers on connection upgrade requests. A remote attacker could exploit this by enticing a user to visit a malicious website, enabling the...

CVE-2026-75508

A flaw was found in graphql-core. The parser's token limit improperly tracks only non-comment tokens while continuing to allocate and retain memory for skipped comments. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted, comment-padded GraphQL...

CVE-2026-79610

A flaw was found in Xen. When a guest virtual machine repeatedly changes grant table configurations, the hypervisor frees and reallocates status memory pages, rendering previously calculated pointers invalid. A malicious guest can exploit these stale pointers to corrupt hypervisor memory,...

CVE-2026-25290

A flaw was found in OOBM. An integer overflow or wraparound vulnerability exists when validating large data buffers from external sources. This flaw occurs due to improper addition used to check buffer length, which can lead to memory corruption. A local attacker could exploit this to achieve...

CVE-2026-84008

A flaw was found in .NET. Due to inefficient algorithmic complexity, an unauthorized remote attacker can send specially crafted requests over the network to cause excessive resource consumption. This issue can result in a Denial of Service DoS, rendering the affected application unresponsive to...

CVE-2026-114724

A flaw was found in Roundcube Webmail. This flaw allows an attacker capable of modifying stored session data to achieve arbitrary code execution through object injection. The vulnerability occurs because session keys prefixed with an exclamation mark are mishandled during session deserialization,...

CVE-2026-114720

A flaw was found in roundcubemail. This vulnerability allows a remote authenticated attacker to execute arbitrary Internet Message Access Protocol IMAP commands on the connected mail server. The issue exists due to insufficient input validation, which permits the injection of carriage return line...

CVE-2026-114716

A flaw was found in Roundcube Webmail. The application does not properly validate media type values extracted from inline image data URIs when preparing outgoing messages. A remote authenticated attacker can exploit this vulnerability by submitting specially crafted messages with newline characte...

CVE-2026-114727

A flaw was found in Roundcube Webmail. The application allows unsafe image types, specifically Scalable Vector Graphics SVG and Encapsulated PostScript EPS, to be uploaded for contact photos. An authenticated remote attacker can exploit this vulnerability by submitting a crafted image file that...

CVE-2026-92709

A flaw was found in rsyslog. This path traversal vulnerability allows a remote attacker to write log files outside the intended logging directory. When dynamic file generation dynaFile templates incorporate untrusted input without proper path validation, crafted log messages can escape the...

CVE-2026-94482

A flaw was found in Next.js. A remote attacker can exploit this vulnerability by sending specially crafted requests to applications using the App Router feature configured with Server Actions. This issue leads to excessive CPU consumption, causing a Denial of Service DoS that prevents the affecte...

CVE-2026-98725

A flaw was found in the Linux kernel's NVMe over Fabrics NVMe-oF target authentication component. A remote attacker connecting to the NVMe target service can exploit this vulnerability by sending a crafted authentication request, causing a Denial of Service DoS through a system crash or potential...

CVE-2026-96232

A flaw was found in .NET. This issue allows an unauthenticated remote attacker to trigger an out-of-bounds read, where the application reads memory outside of its intended boundaries. By sending specially crafted requests over the network, the attacker can access sensitive memory contents, leadin...

CVE-2026-96235

A flaw was found in .NET. Due to an out-of-bounds write vulnerability, where data is written past the boundary of an allocated memory buffer, memory corruption can occur. A remote, unauthenticated attacker could exploit this issue over the network to achieve arbitrary code execution on the target...

CVE-2026-95509

A flaw was found in Qt for MCUs. An incorrect buffer size calculation occurs during String.arg formatting when handling Latin-1 encoded characters, leading to an out-of-bounds read. A remote attacker could supply specially crafted string input to trigger this flaw, resulting in an application cra...

CVE-2026-96224

A flaw was found in .NET. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution over the network. By tricking a user or application into processing specially crafted data, an attacker can corrupt memory and execute unauthorized commands with the...

CVE-2026-91385

A flaw was found in OpenJFX. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code in a sandboxed Java environment. Successful exploitation allows the attacker to obtain unauthorized read and write access to application data, resulting in...

CVE-2026-98715

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine AMD Secure Virtual Machine SVM implementation. This flaw can lead to information disclosure or memory corruption due to dropped Translation Lookaside Buffer TLB flushes. When a virtual machine execution VMRUN fails, KVM reset...

CVE-2026-98718

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem supporting AMD SEV Secure Encrypted Virtualization. During virtual machine migration on the same host, CPU cache maintenance was performed after deactivating the source guest's encryption state instead of before. Th...