CVE-2026-100071

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking subsystem. When device initialization fails after network receive handlers have already been registered, frames received during this setup window can create dynamic node entries that are not properly...

CVE-2026-100079

A flaw was found in the Linux kernel's USB Type-C Connector System Software Interface UCSI driver. This vulnerability can result in a Denial of Service DoS or system instability due to improper resource cleanup during device teardown. Debug filesystem debugfs entries created during registration a...

CVE-2026-100072

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. This vulnerability can lead to a Denial of Service DoS or system instability due to unsafe reference handling during platform device creation. Because the kernel fails to acquire a reference to the...

CVE-2026-47527

A flaw was found in the NVIDIA GPU display driver. An authenticated local attacker with high privileges can trigger an out-of-bounds read vulnerability in the device firmware. Successful exploitation may lead to arbitrary code execution, denial of service DoS, privilege escalation, or unauthorize...

CVE-2026-47524

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger an out-of-bounds read in the kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or information disclosure...

CVE-2026-47515

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an unbounded string operation within the kernel mode layer, causing an out-of-bounds memory read. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges,...

CVE-2026-100073

A flaw was found in the Linux kernel's ext4 file system. When saving modified memory pages back to storage, the system underestimates the journal transaction space required to split and update file block mappings. A local user could exploit this flaw by performing specific write operations,...

CVE-2026-47604

A flaw was found in the NVIDIA GPU display driver. Missing authorization checks in the kernel-mode driver allow a local user to access another process's graphics processing unit GPU channel state. Successful exploitation can lead to unauthorized information disclosure...

CVE-2026-47566

A flaw was found in nvidia-driver. An unprivileged local attacker can trigger specific error-handling routines in the kernel-mode driver layer, causing memory to leak instead of being freed. Over time, this memory exhaustion can destabilize the operating system and result in a Denial of Service D...

CVE-2026-47582

A flaw was found in the NVIDIA GPU Display Driver for Windows kernel module. A local attacker with basic user privileges can trigger an out-of-bounds write vulnerability in the driver. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate privileges, tamper...

CVE-2026-47549

A flaw was found in nvidia-driver. This vulnerability allows an unprivileged local user to cause a Denial of Service DoS by triggering an invalid memory access NULL pointer dereference in the kernel module. A successful exploit results in a system crash...

CVE-2026-47537

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local privileged attacker to corrupt system memory. Successful exploitation can lead to arbitrary code execution, privilege escalation, or a Denial of Service DoS, as well as...

CVE-2026-47531

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with high privileges can trigger an invalid memory access null pointer dereference within the kernel mode layer. Successful exploitation leads to a Denial of Service DoS by causing the driver or host system to crash...

CVE-2026-47523

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger an out-of-bounds write memory error in the kernel mode layer. Successful exploitation could lead to privilege escalation and arbitrary code execution with kernel permissions, cause a Denial of Service...

CVE-2026-47513

A flaw was found in the NVIDIA GPU display driver nvidia-driver. A vulnerability in the kernel mode layer allows a local user to trigger an out-of-bounds read from kernel heap memory. A successful exploit could enable an attacker to achieve arbitrary code execution, escalate privileges, cause a...

CVE-2026-47529

A flaw was found in the NVIDIA GPU display driver. A local attacker with administrative privileges can trigger an out-of-bounds write in the driver's kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or...

CVE-2026-47526

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with administrative privileges can trigger a null pointer dereference vulnerability within the driver firmware. Successful exploitation may lead to a Denial of Service DoS by causing the system or graphics subsystem to crash...

CVE-2026-100076

A flaw was found in the Linux kernel's rtl8723bs wireless network driver. When handling wireless management frames under certain error conditions, the driver fails to release allocated transmission frames and buffers back to their memory pools. An attacker within radio range could send unexpected...

CVE-2026-100075

A flaw was found in the Linux kernel's SCSI Remote Direct Memory Access Protocol SRP target driver. When memory allocation fails while processing multi-buffer descriptors, the error-handling routine fails to reset internal tracking counters and leaves an invalid memory pointer. A remote client...

CVE-2026-74268

A flaw was found in the Linux kernel. A race condition exists in the TCP Transmission Control Protocol component when handling child sockets. If a child socket's setup fails, it can inherit BPF Berkeley Packet Filter socket operation flags, leading to a situation where the system attempts to call...

CVE-2026-53718

A flaw was found in Envoy Gateway. An attacker could exploit a vulnerability in how HTTPRoute handles custom backend references. This allows a route-owning namespace to access and utilize resources in another namespace without proper authorization, bypassing the intended Gateway API cross-namespa...

CVE-2026-47603

A flaw was found in the NVIDIA GPU Display Driver. Missing authorization checks in the kernel mode driver allow a local user to access the Graphics Processing Unit GPU channel state of another process. A local attacker can exploit this vulnerability to access sensitive process data, resulting in...

CVE-2026-47562

A flaw was found in the NVIDIA GPU Display Driver for Linux. The driver's kernel mode layer fails to properly sanitize user-supplied version strings, allowing a local user to inject crafted text into the kernel log. A successful exploit can lead to log data tampering and a Denial of Service DoS...

CVE-2026-47517

A flaw was found in nvidia-driver. A local user can submit a specially crafted input/output control ioctl request to the kernel-mode driver, triggering a null pointer dereference. Successful exploitation can crash the system, resulting in a Denial of Service DoS...

CVE-2026-12624

A flaw was found in Vault's Access Control List ACL policy engine. The engine did not consistently enforce wildcard deny rules against LIST requests with a trailing slash. This vulnerability could allow an authenticated attacker with specific permissions to enumerate the names of entries they wer...

CVE-2026-94029

A flaw was found in Apache MINA SSHD. When processing SSH File Transfer Protocol SFTP check-file extensions, the server accumulates file hash verification responses entirely in memory without enforcing a size limit. An authenticated remote attacker can exploit this vulnerability by requesting fil...

CVE-2026-100077

A flaw was found in the Linux kernel's MSM DRM driver. This vulnerability can lead to a Denial of Service DoS during GPU recovery operations. If a hung command submission is retired before the hardware recovery process completes, the driver may release memory buffers that the GPU is still activel...

CVE-2026-47592

A flaw was found in nvidia-driver. An out-of-bounds read vulnerability in the kernel mode layer allows a local, unprivileged user to access memory outside of intended boundaries. Successful exploitation may result in arbitrary code execution, privilege escalation, denial of service DoS, or...

CVE-2026-47590

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged attacker can trigger a use-after-free memory issue accessing memory after it has been released by issuing a specific sequence of driver commands. Successful exploitation may allow the attacker to achieve arbitrary code...

CVE-2026-47588

A flaw was found in the NVIDIA GPU display driver for Linux. A local unprivileged user can trigger a use-after-free condition, where the driver references memory after it has been freed, by issuing a specific sequence of driver commands. Successful exploitation could allow an attacker to achieve...

CVE-2026-47583

A flaw was found in the NVIDIA GPU Display Driver kernel module. A local attacker with standard user privileges can exploit a type confusion vulnerability where the driver misinterprets data structures during processing. Successful exploitation could allow the attacker to execute arbitrary code...

CVE-2026-47569

A flaw was found in the NVIDIA GPU display driver. A local user can trigger a race condition during handle recycling in the kernel mode layer, resulting in a type confusion condition where memory of one type is misinterpreted as another. A successful exploit could allow an attacker to achieve...

CVE-2026-47556

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial ...

CVE-2026-47551

A flaw was found in the NVIDIA GPU Display Driver. A local user can trigger a use-after-free condition in the kernel-mode driver layer, where previously freed memory is improperly referenced. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privileges,...

CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access...

CVE-2026-100811

A flaw was found in Firefox. A use-after-free memory flaw in the Document Object Model DOM Core and HTML component allows a remote attacker to perform a sandbox escape. By enticing a user to visit a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code...

CVE-2026-100786

A flaw was found in Firefox. A use-after-free vulnerability in the Graphics component allows an attacker to escape the browser sandbox by enticing a user into processing specially crafted web content. Successful exploitation could allow an attacker to bypass security boundaries and execute...

CVE-2026-47597

A flaw was found in the NVIDIA GPU Display Driver. An unprivileged local user can exploit a missing self-reference check during map cleanup in the open-source kernel module Resource Server, causing a use-after-free condition where released memory is improperly accessed. Successful exploitation...

CVE-2026-47589

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger a use-after-free condition, where memory is improperly accessed after being released, by issuing a specific sequence of driver commands. Successful exploitation could allow the attacker to execute...

CVE-2026-47587

A flaw was found in nvidia-driver. A local unprivileged user can trigger a use-after-free condition in the NVIDIA GPU Display Driver for Linux, allowing them to execute arbitrary code or escalate privileges on the system. Successful exploitation could also result in a Denial of Service DoS,...

CVE-2026-47561

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control ioctl request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the...

CVE-2026-47560

A flaw was found in the NVIDIA GPU Display Driver for Linux. An unprivileged local user can trigger a use-after-free condition in the kernel mode layer, allowing memory to be accessed after it has been released. A successful exploit could permit an attacker to achieve arbitrary code execution,...

CVE-2026-47514

A flaw was found in nvidia-driver. A local user can trigger an issue in the driver's kernel mode layer that exposes sensitive kernel stack contents, including return addresses and memory pointers. A successful exploit could allow an attacker to achieve arbitrary code execution, escalate privilege...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

CVE-2026-94002

A flaw was found in the sshd-sftp component of Apache MINA SSHD. This vulnerability allows a malicious server to cause a Denial of Service DoS on the client by exhausting system memory. The SFTP SSH File Transfer Protocol client fails to verify whether incoming replies correspond to previously se...

CVE-2026-93994

A flaw was found in Apache MINA SSHD. When the server is configured to require multiple Secure Shell SSH public keys for authentication, it fails to verify that the submitted keys are distinct. A remote user can exploit this flaw by presenting the same public key twice to satisfy multi-key...

CVE-2026-93125

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability occurs because the verifier does not correctly handle certain buffer size arguments, allowing values larger than a 32-bit integer. When these oversized values are processed, they are truncated, leading ...

CVE-2026-93144

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The checkptrtobtfaccess function, which is responsible for validating memory access through BPF Type Format BTF pointers, incorrectly allowed certain program-type callbacks to bypass the intended read-only policy for...

CVE-2026-93112

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. The bpfcpumaskpopulate function incorrectly allows writing to a read-only memory region by accepting borrowed cpumask pointers as writable destinations. This could allow a local attacker to cause a denial of service or...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...