CVE-2026-96960

A flaw was found in .NET. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted network requests that trigger asymmetric resource consumption, causing the system to expend disproportionate processing resources. Successful exploitation leads to a Denial of...

CVE-2026-98716

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. During nested virtualization, KVM incorrectly checked whether Model-Specific Register MSR accesses were intercepted by referencing the wrong control structure's permission bitmap. A malicious...

CVE-2026-96958

A flaw was found in .NET. Due to inefficient algorithmic complexity, an unauthenticated remote attacker can submit specially crafted requests over the network. Processing these requests leads to excessive resource consumption, resulting in a Denial of Service DoS...

CVE-2026-96959

A flaw was found in .NET. An unauthenticated remote attacker can exploit improper resource allocation and a lack of rate limiting over the network to exhaust system resources. This flaw leads to a Denial of Service DoS, causing the affected application or service to become unavailable to legitima...

CVE-2026-97801

A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state...

CVE-2026-101774

A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Denial of Service DoS. In addition, successful exploitation ma...

CVE-2026-91403

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

CVE-2026-111079

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model LLM provider endpoints during queries. If a user enters sensitive data—such as API tokens,...

CVE-2026-110879

PolymorphicTypeValidator bypass via generic type arguments and array element types in jackson-databind allows arbitrary class instantiation incomplete fix for CVE-2026-54512 CVE-2026-110879 Mitigation Mitigation for this issue is either not available or the currently available options do not meet...

CVE-2026-101781

A flaw was found in MySQL's Group Replication Group Communication System GCS. An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Successful exploitation allows the attacker to take over the MySQ...

CVE-2026-98705

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When wireless mesh proxy paths are removed or expire, the interface path counter is decremented without having been accounted for during path creation. An attacker can exploit this accounting flaw through rapid proxy path churn,...

CVE-2026-98704

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When associating with a wireless network profile that omits certain configuration parameters, the system prematurely frees internal data structures and subsequently reads the freed memory during connection setup. A malicious acce...

CVE-2026-98703

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local privileged user can cause a Denial of Service DoS by writing an invalid index value to the fixed-rate debugfs debug filesystem interface. Due to missing input validation, the kernel uses the value to access data outside...

CVE-2026-98701

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When adding mesh network routes, failed or duplicate path requests do not release reserved slot quotas. An adjacent attacker could exploit this issue by repeatedly triggering failed path additions to exhaust the mesh...

CVE-2026-114722

A flaw was found in Roundcube Webmail. When rendering incoming HTML messages, the application fails to properly confine Cascading Style Sheets CSS styling rules to the email body. A remote attacker can exploit this issue by sending a specially crafted email that alters the surrounding webmail...

CVE-2026-115207

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

CVE-2026-114718

A flaw was found in roundcubemail. The password plugin does not properly sanitize error messages returned by password drivers before displaying them in the web interface. A remote attacker or backend service capable of controlling these error responses can execute arbitrary script code in the...

CVE-2026-114437

A flaw was found in chi. The ClientIPFromXFF middleware evaluates IP addresses in the X-Forwarded-For XFF HTTP header, but fails to verify that the direct incoming network connection originates from a trusted IP address range. A remote attacker who can connect directly to the server can exploit...

CVE-2026-114348

A flaw was found in webpack-dev-server. An unauthenticated remote attacker can exploit improper Host header validation in the open-editor endpoint to obtain sensitive technical information. By sending a request with a specially crafted Host header, the attacker triggers an internal server error...

CVE-2026-114730

A flaw was found in Roundcube Webmail. The application's internal URL validation mechanism fails to properly block certain IPv6 address representations, including transition prefixes and unspecified addresses. A remote attacker can exploit this flaw by submitting a crafted URL to bypass Server-Si...

CVE-2026-98700

A flaw was found in the Linux kernel's mac80211 wireless subsystem. The transmission function for encapsulated Ethernet frames fails to set the operating frequency band from the channel context on non-Multi-Link Device MLD interfaces. A local user generating network traffic on an affected interfa...

CVE-2026-98697

A flaw was found in the Linux kernel's USB serial subsystem. A race condition during USB serial driver deregistration can result in a kernel memory leak. A local user with permissions to modify driver attributes can trigger this issue by writing to the dynamic identifier interface while the drive...

CVE-2026-98699

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition occurs during mesh network path deletion when an active lookup reinserts an entry into the fast transmission cache after the cache has been cleared, resulting in a use-after-free condition where memory is accesse...

CVE-2026-98698

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When handling a Fast Initial Link Setup FILS association request frame with an empty payload, the system fails to validate zero-length plaintext before cryptographic processing. This issue causes an invalid memory reference to be...

CVE-2026-98695

A flaw was found in the Linux kernel's USB serial subsystem. A local user could cause a Denial of Service DoS due to a race condition between input/output control ioctl operations and device disconnection. If a USB serial device is disconnected during an active operation, the driver may attempt t...

CVE-2026-98694

A flaw was found in the Linux kernel's Thunderbolt driver. When a control channel request is canceled, a race condition can cause the request to be rescheduled after its memory has already been freed, resulting in a use-after-free vulnerability. A local attacker could exploit this flaw to cause a...

CVE-2026-98693

A flaw was found in the Linux kernel's Thunderbolt driver. A physically proximate user or local attacker could trigger a Denial of Service DoS and crash the system by disconnecting a device or unbinding the driver while DisplayPort tunnel operations are still active. This issue occurs because the...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-98690

A flaw was found in the Linux kernel's Thunderbolt subsystem. This flaw allows a local user to cause a Denial of Service DoS by causing kernel cleanup operations to hang indefinitely. When a DisplayPort DP tunnel is disconnected before an internal read operation completes, the driver leaks an...

CVE-2026-98689

A flaw was found in the Linux kernel's Thunderbolt subsystem. A race condition occurs when DisplayPort DP read operations are canceled during system suspend or device disconnection, allowing work handlers to access tunnel structures that have already been torn down. A local attacker could trigger...

CVE-2026-98688

A flaw was found in the Linux kernel's Thunderbolt subsystem. A race condition during device removal operations can lead to a NULL pointer dereference. A local user could exploit this timing issue during device disconnection to trigger a kernel crash, resulting in a Denial of Service DoS...

CVE-2026-98687

A flaw was found in the Linux kernel's Thunderbolt driver. When processing property requests from peer devices, the driver fails to verify that the response data length does not exceed the allocated buffer size. A malicious peer can exploit this flaw by sending an oversized response packet,...

CVE-2026-110353

A flaw was found in HAProxy. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a truncated HTTP/2 PING frame. Because the server fails to properly validate and process the incomplete frame, the pending data is never consumed, causing worker threads to spin continuous...

CVE-2026-98685

A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to information disclosure when extending a file via a clone range operation. Because the client fails to discard cached memory pages that straddle the original end-of-file boundary, data previously written past the...

CVE-2026-98686

A flaw was found in the Linux kernel's SMB Server Message Block client. When extending a file using a zero-range operation, cached memory pages past the previous end-of-file boundary are not properly discarded. A local user can exploit this vulnerability to view stale or previously buffered data...

CVE-2026-96640

A flaw was found in Pillow. When appending images to an existing PDF document, the PDF parser does not track duplicate indirect references within the page structure. A remote attacker can provide a specially crafted PDF file containing repeated references to the same page nodes, causing the...

CVE-2026-98684

A flaw was found in the Linux kernel's Server Message Block SMB client. When performing file space allocation operations against certain remote servers, such as Windows servers, the client queries allocated file ranges before flushing recently written data. Because the remote server may report...

CVE-2026-110354

A flaw was found in haproxy. A remote, unauthenticated attacker can trigger a denial of service DoS by sending a specially crafted HTTP/1.1 chunked request. When processing the request, the parser repeatedly re-evaluates the same data without making forward progress, trapping the worker thread in...

CVE-2026-98683

A flaw was found in the Linux kernel's SMB client. When zeroing a range within a file that does not reach the end of the file, dirty cached data is not flushed before the client requests the server to zero the region. A local user performing a zero-range operation could cause dirty cached pages t...

CVE-2026-100820

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Address Bar component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-98682

A flaw was found in the Linux kernel's Server Message Block SMB client subsystem. Due to improper synchronization during server-side file copy and clone operations, pending write operations are not drained before copying begins. A local user could exploit this timing issue during copy operations ...

CVE-2026-98681

A flaw was found in the Linux kernel's SMB Server Message Block client. Multiple internal file status flags shared the same memory byte without unified locking, creating a race condition during concurrent file operations. A local user performing simultaneous file operations could cause updates to...

CVE-2026-98680

A flaw was found in the Linux kernel's Kionix KX022A accelerometer sensor driver. When enabling the device buffer fails during register configuration, the driver fails to properly free allocated memory or restore previous hardware states. A local user could trigger this error condition to cause a...

CVE-2026-98679

A flaw was found in the Linux kernel's KXCJK-1013 accelerometer driver. A local user could exploit this flaw by submitting duplicate event disable requests to the device configuration interface. Because the driver does not filter repeated disable requests, it improperly releases a runtime power...

CVE-2026-98678

A flaw was found in the Linux kernel's Analog Devices AD4030 Analog-to-Digital Converter ADC driver. The driver calculates a mathematical logarithm on an averaging parameter prior to validating whether the input is positive. A local user with access to configure the device could provide a...

CVE-2026-98675

A flaw was found in the Linux kernel's Analog Devices ADE9000 driver. An off-by-one error in the interrupt handler sets an incorrect upper bound when scanning device status events. Consequently, the driver fails to detect and report Phase C power dip events to the operating system, preventing...

CVE-2026-98677

A flaw was found in the Linux kernel's Analog-to-Digital Converter ADC Sigma-Delta driver. Due to an improper resource cleanup sequence when a device is unbound or disconnected, the internal sample buffer is freed before interrupt handling is disabled. A local attacker with administrative...

CVE-2026-98676

A flaw was found in the Linux kernel's ADE9000 driver. This vulnerability allows a local user to cause a denial of service DoS and system crash when probing an ADE9000 device configured as a clock provider with an external input clock. During clock output registration, the driver supplies an...

CVE-2026-98671

A flaw was found in the sun4i-gpadc-iio driver within the Linux kernel. When device initialization fails during thermal zone registration, the driver returns without unregistering the Industrial I/O IIO map or disabling runtime power management. A local user could trigger this failure path to cau...