CVE-2026-97595

A flaw was found in the Linux kernel's mac802154 wireless network subsystem. A lack of proper locking and reference counting allows queued incoming frames to reference network interface data after the interface has been deleted, resulting in a use-after-free vulnerability. An attacker could explo...

CVE-2026-97420

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program modifies a system control sysctl parameter, the kernel fails to append a null-terminating byte to the replacement buffer. Downstream kernel parsers expecting a properly terminated string may read past...

CVE-2026-97593

A flaw was found in the Linux kernel's s390 IOMMU Input-Output Memory Management Unit driver. When performing address translation for an unmapped I/O virtual address on systems configured with five-level translation tables, the driver fails to verify whether a region table pointer is valid before...

CVE-2026-97416

A flaw was found in the Linux kernel's Btrfs file system. An attacker could exploit this vulnerability by mounting a corrupted file system image and initiating a balance operation. Due to a missing validation check when querying block group metadata, the kernel triggers a null pointer dereference...

CVE-2026-97594

A flaw was found in the Linux kernel's Landlock security module. A missing reference lock allows a race condition to occur when validating directory permissions during file linking operations. A local attacker could exploit this by executing concurrent file link and rename requests to trigger a...

CVE-2026-97419

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR subsystem. When ring error or node down events occur, asynchronous netlink notifications are broadcast exclusively to the root network namespace rather than the device's specific network namespace. This issue allows ...

CVE-2026-97418

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem within the ESS AudioDrive ES18xx sound card driver. During mixer initialization, the driver fails to verify whether memory allocation for sound control structures succeeds before dereferencing the returned...

CVE-2026-96422

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by injecting crafted network packets or convincing a user to open a malicious packet capture file. An assertion failure within the Frame protocol metadissector triggers an unexpected application...

CVE-2026-96423

A flaw was found in Wireshark. A heap-based buffer overflow in the X11 protocol dissector allows an attacker to cause a Denial of Service DoS by injecting malformed packets or providing a crafted capture file. Successful exploitation leads to an application crash, disrupting network packet...

CVE-2026-96420

A flaw was found in Wireshark. An attacker could exploit this vulnerability by enticing a user to open a specially crafted Toshiba capture file, triggering a buffer over-read in the Toshiba file parser. This issue causes the application to crash, leading to a Denial of Service DoS. Mitigation...

CVE-2026-96419

A flaw was found in Wireshark. Due to improper pathname validation during configuration profile imports, an attacker could convince a user to import a maliciously crafted profile. Successful exploitation could allow arbitrary code execution or cause an application crash, resulting in a Denial of...

CVE-2026-96417

A flaw was found in Wireshark. By convincing a user to open a specially crafted capture file containing malformed Radio Frequency for Consumer Electronics RF4CE network traffic, an attacker can cause the RF4CE protocol dissector to crash. This issue primarily results in a Denial of Service DoS by...

CVE-2026-96418

A flaw was found in Wireshark. By convincing a user to open a specially crafted packet capture containing Tagged Image File Format TIFF data, an attacker can trigger an infinite loop in the TIFF protocol dissector. This issue causes the application to hang and become unresponsive, resulting in a...

CVE-2026-95520

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

CVE-2026-96416

A flaw was found in Wireshark. An attacker could exploit this vulnerability by convincing a user to open a specially crafted packet capture file or by injecting malformed IEEE 802.11 wireless network traffic. Processing these invalid packets causes an application crash in the protocol dissector,...

CVE-2026-96415

A flaw was found in Wireshark. The Catapult DCT2000 protocol dissector is susceptible to a crash that results in a Denial of Service DoS. An attacker could exploit this flaw by injecting malformed network packets or by tricking a user into opening a specially crafted capture file, causing the...

CVE-2026-95390

A flaw was found in Wireshark. By convincing a user to open a specially crafted PEAK CAN TRC trace file, an attacker can trigger an invalid memory access in the file parser. This issue causes the application to crash, resulting in a Denial of Service DoS. Mitigation Mitigation for this issue is...

CVE-2026-95386

A flaw was found in Wireshark. By tricking a user into opening a specially crafted TTL file, an attacker can trigger an infinite loop in the file parser. This issue causes the application to hang or become unresponsive, resulting in a Denial of Service DoS. Mitigation Mitigation for this issue is...

CVE-2026-95393

A flaw was found in Wireshark's CSN.1 Concrete Syntax Notation One protocol dissector. By transmitting malformed network packets or providing a crafted packet capture file, an attacker can trigger a heap-based buffer overflow. This vulnerability causes the application to crash, leading to a Denia...

CVE-2026-88358

A flaw was found in simdjson. An attacker can cause a Denial of Service DoS by providing a specially crafted, truncated JSON document to an application using the library. During processing, the parser accesses memory beyond the input buffer, causing the application to crash unexpectedly...

CVE-2026-95388

A flaw was found in Wireshark. A heap-based buffer overflow in the sharkd utility can cause the application to crash, resulting in a Denial of Service DoS. An attacker could exploit this vulnerability by convincing a user to process specially crafted input. Mitigation To mitigate this flaw,...

CVE-2026-88362

A flaw was found in MuJS. An attacker can trigger a Denial of Service DoS by providing specially crafted JavaScript input containing an excessively large array index. This flaw causes an out-of-range numeric value to be converted to an integer without proper validation, leading to undefined...

CVE-2026-100705

A flaw was found in Kyverno. Due to missing egress network filtering in its legacy API call handler, an attacker with permission to author policies or submit templated resources can trigger Server-Side Request Forgery SSRF. This vulnerability allows the attacker to force Kyverno to issue arbitrar...

CVE-2026-19547

A flaw was found in Ghostscript. In Windows environments, the application searches for PostScript resource files in predictable directory paths that do not exist by default. An authenticated local user can exploit this issue by creating the required directory structure and planting a malicious...

CVE-2026-97592

A flaw was found in the Linux kernel. During Advanced Encryption Standard AES cryptographic operations on s390 architectures, temporary memory buffers and parameter blocks are not properly cleared after use or during certain error paths. A local attacker could exploit this flaw to access residual...

CVE-2026-97590

A flaw was found in the Linux kernel. This vulnerability leads to information disclosure during protected Advanced Encryption Standard PAES operations on s390 architectures. Because the kernel fails to clear temporary memory buffers after cryptographic processing, a local attacker could access...

CVE-2026-97591

A flaw was found in the Linux kernel's s390 crypto subsystem. When processing Protected Key HMAC PHMAC operations, the driver improperly treats busy queue status codes from the cryptographic engine as failure conditions. A local user could exploit this flaw by submitting cryptographic requests...

CVE-2026-97415

A flaw was found in the Linux kernel's Btrfs file system. When processing subvolume reference items, the file system fails to properly validate on-disk name lengths before reading them. A local user could exploit this vulnerability by mounting a maliciously crafted file system image and querying...

CVE-2026-97413

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. A malicious client can trigger an integer underflow by sending a specially crafted message with an oversized length field during read or write operations. This improper validation leads to an out-of-bounds memory...

CVE-2026-97414

A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...

CVE-2026-97412

A flaw was found in the Linux kernel's pdscore driver. During device teardown, the driver releases Direct Memory Access DMA buffers without disabling bus mastering, allowing the device to continue writing to system memory after it has been freed. A local user with administrative privileges could...

CVE-2026-97411

A flaw was found in the Linux kernel's IBM EMAC network driver. During module removal, the driver unconditionally attempts to disable network polling routines even if they were never enabled or were already stopped. This improper state handling causes the kernel to enter an infinite loop, resulti...

CVE-2026-97410

A flaw was found in the Linux kernel. This race condition vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when removing a netconsole logging target concurrently while an unregistered network interface undergoes cleanup. Because the remov...

CVE-2026-97149

A flaw was found in OpenStack Swift's tempurl middleware. A TempURL is a signed, time-limited link that should allow access to only one object. The signature does not cover extra request headers, and Swift did not block the X-Copy-From header on these signed upload requests. An attacker who alrea...

CVE-2026-96421

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by convincing a user to open a specially crafted packet capture file containing malformed Universal Serial Bus Human Interface Device USB HID traffic. When processing the malformed data, the USB...

CVE-2026-82596

A flaw was found in LatencyUtils. A local attacker can exploit this vulnerability by performing a manipulation within the PauseDetector component, specifically affecting the LatencyStats.recordDetectedPause function. This can lead to memory corruption, potentially impacting the stability and...

CVE-2026-87609

A flaw was found in the Sharing component of Google Chrome on iOS. A remote attacker can exploit this vulnerability to execute arbitrary code outside the application sandbox by sending crafted network traffic. This issue stems from a use-after-free condition, which occurs when the application...

CVE-2026-95387

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

CVE-2026-97588

A flaw was found in the Linux kernel's s390 cryptographic subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by executing cryptographic operations when underlying hardware repeatedly reports a busy state. Because the subsystem fails to properly translate persistent...

CVE-2026-100722

A flaw was found in vm2. An attacker who can execute untrusted code within the sandbox can trigger an unhandled error by instantiating host-provided functions that return a rejected asynchronous operation Promise. Due to missing error handling in the sandbox-to-host object construction trap, the...

CVE-2026-97409

A flaw was found in the Linux kernel's NVMe over Fibre Channel NVMe-FC driver. When establishing a connection to an NVMe-FC target, an administrative request timeout triggers error-handling routines that attempt to abort requests on uninitialized I/O queues. A malicious or unresponsive target cou...

CVE-2026-97408

A flaw was found in the Linux kernel's Bluetooth subsystem. The Logical Link Control and Adaptation Protocol L2CAP implementation fails to properly validate the payload length of connectionless frames before reading the Protocol/Service Multiplexer PSM field. An adjacent attacker within Bluetooth...

CVE-2026-95395

A flaw was found in Wireshark. A memory leak in the IEEE C37.118 Synchrophasor protocol dissector can allow an attacker to cause a Denial of Service DoS. By convincing a user to open a maliciously crafted packet capture file, the dissector fails to release allocated memory during packet dissectio...

CVE-2026-97407

A flaw was found in the Linux kernel's Rockchip PDM audio driver. This vulnerability can lead to a Denial of Service DoS because the driver fails to check the return status of runtime power management PM resume operations before accessing hardware registers. A local attacker could exploit this fl...

CVE-2026-93830

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by sending high volumes of network traffic to an affected system. Under heavy packet load, the network controller exhausts its receive buffers and continuously fires hardware interrupts...

CVE-2026-77756

A flaw was found in Apache Tomcat. This vulnerability, known as HTTP Request/Response Smuggling, occurs when Tomcat processes the transfer-encoding header for an HTTP/1.0 request while operating behind a reverse proxy. A remote attacker could exploit this to cause a denial of service, leading to...

CVE-2026-77762

A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...

CVE-2026-97589

A flaw was found in the Linux kernel's s390 cryptographic drivers. When handling asynchronous cryptographic operations, certain request callbacks incorrectly propagate error codes back to the crypto engine after already completing a request. This causes the crypto engine to mistakenly perform a...

CVE-2026-97587

A flaw was found in the Linux kernel's RISC-V performance monitoring perf subsystem. On 32-bit RISC-V systems, the available counter mask was stored in a 32-bit data structure while the subsystem iterated over up to 64 counters, resulting in an out-of-bounds memory read. A local user could exploi...

CVE-2026-91012

A flaw was found in Apache Karaf. This vulnerability allows privilege escalation when the configuration service fails to properly restrict file paths to the designated configuration directory. An authenticated user with manager-level permissions can supply directory traversal sequences or absolut...