CVE-2026-120330

A flaw was found in the TYPO3 Mail extension. This vulnerability allows an authenticated backend user to access and disclose sensitive email and recipient information beyond their authorized permissions. The issue occurs because administrative actions and background web request endpoints fail to...

CVE-2026-101625

A flaw was found in MySQL Connector/Net. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to interact with a malicious request across the network. Successful exploitation allows the attacker to obtain unauthorized read access to a subset of data accessible ...

CVE-2026-101626

A flaw was found in MySQL Connector/Net. This vulnerability may allow an unauthenticated remote attacker with network access to cause unauthorized information disclosure. Under complex conditions, successful exploitation can result in unauthorized access to critical data handled by the connector...

CVE-2026-54604

A flaw was found in OpenSlide, a C library for reading whole slide image files. A remote attacker can provide a specially crafted image file to a network service that uses OpenSlide. This can cause uninitialized heap memory to be included in the pixel data returned by the openslidereadregion...

CVE-2026-41216

A flaw was found in vtk. An invalid pointer dereference in the vtkPNGReader component allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PNG image file. When the application attempts to process the malicious file, it crashes unexpectedly...

CVE-2026-102805

A flaw was found in stb. When an application uses the stbimagewrite library to encode images, processing specially crafted input can trigger an integer overflow. A remote attacker could exploit this vulnerability to corrupt memory or cause an application crash, resulting in a Denial of Service Do...

CVE-2026-121003

A flaw was found in Epiphany. An information disclosure vulnerability allows local users to discover websites visited during private browsing sessions. When a user selects the "Always Allow" option for external URL schemes while in incognito mode, Epiphany stores the visited domain into the user'...

CVE-2026-119600

A flaw was found in tcpflow. An unauthenticated remote attacker can exploit an out-of-bounds read vulnerability by processing crafted network packets with manipulated Internet Protocol IP payload lengths in live traffic or packet capture PCAP files. This can allow the attacker to cause an...

CVE-2026-74846

A flaw was found in Catalyst::Plugin::Authentication. The legacy password verification mechanism performs non-constant-time string comparisons when checking passwords and cryptographic hashes. A remote attacker can exploit this timing discrepancy by measuring response-time differences to...

CVE-2026-119025

A flaw was found in the open package. This vulnerability allows an attacker to achieve arbitrary code execution on systems running Windows or Windows Subsystem for Linux WSL. The issue occurs because the package fails to properly sanitize input URLs before passing them to PowerShell. By providing...

CVE-2026-114117

A flaw was found in Vyper. A remote attacker can cause smart contracts to execute with incorrect values due to an optimizer miscompilation. When compiling conditional branches containing certain bitwise operations under default optimization settings, the compiler incorrectly reduces the expressio...

CVE-2021-48020

A flaw was found in Vyper. When compiling contracts that execute internal function calls inside array structures or nested elements, an incorrect stack pointer is used. A remote attacker interacting with an affected contract can trigger memory corruption, resulting in unexpected contract executio...

CVE-2021-48018

A flaw was found in Vyper. The compiler improperly assigns storage locations for reentrancy locks—safeguards designed to prevent repeated, recursive execution—to the same memory slots as contract variables. When an external caller invokes a protected function, setting the lock overwrites existing...

CVE-2020-37288

A flaw was found in Vyper. A remote attacker can cause a Denial of Service DoS against affected smart contracts by submitting transactions that invoke specific contract functions. Due to incorrect bytecode generation for return statements located inside loops within nested internal calls, the...

CVE-2026-57191

A flaw was found in Asterisk. An unbounded string parsing vulnerability in the respjsippubsub module allows an unauthenticated remote attacker to trigger a stack-based buffer overflow by sending a specially crafted Message Waiting Indication MWI NOTIFY packet. Successful exploitation leads to a...

CVE-2026-112899

A flaw was found in Pillow. The Encapsulated PostScript EPS image loader only validates decompression bomb limits against the unscaled dimensions defined in the file, rather than the final scaled dimensions requested during rendering. An attacker can exploit this issue by providing a crafted EPS...

CVE-2026-89787

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker could craft a directory entry that, when processed during a directory search, leads to an out-of-bounds read. This vulnerability can result in a use-after-free condition, potentially causing a denial of service or informatio...

CVE-2026-89827

A flaw was found in the Linux kernel's drm/amdgpu component. The uvdv70swinit function, responsible for initializing the UVD Unified Video Decoder ring, does not properly set up the decode ring for an SR-IOV Single Root I/O Virtualization Virtual Function VF. This can lead to the amdgpuuvdresume...

CVE-2026-89914

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for ARM64 architectures. An omission in the decoderangetlbi helper, responsible for managing the Translation Lookaside Buffer TLB, failed to correctly extend virtual addresses VA during certain invalidation...

CVE-2026-98077

A flaw was found in the Linux kernel's Session Initiation Protocol SIP netfilter connection tracking module. When processing incoming SIP headers, the parser fails to properly detect the end of the network packet buffer when trailing whitespace is present without a header delimiter, resulting in ...

CVE-2026-120971

A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not handled by an application exception mapper, RESTEasy returns the exception's localized message in the HTTP 500 response body. A remote unauthenticated attacker who can...

CVE-2026-80736

A flaw was found in the Linux kernel's Thunderbolt driver. The tbconsumeddpbandwidth function attempts to access an array beyond its allocated memory, specifically when handling bandwidth group IDs. This out-of-bounds read can lead to an incorrect calculation of reserved bandwidth for Thunderbolt...

CVE-2026-89931

A flaw was found in the Kernel-based Virtual Machine KVM nVMX component of the Linux kernel. This vulnerability arises from improper handling of nested virtual machine VM exits, where a specific request flag is not consistently cleared. This oversight can lead to the same memory pages being mappe...

CVE-2026-93783

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. This vulnerability allows an attacker within Bluetooth range to cause a Denial of Service DoS or trigger an information disclosure by transmitting specially crafted, truncated, or zero-length frames...

CVE-2026-120831

A flaw was found in libslirp in ifoutput. When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm-mnextpkt instead of the session queue head, corrupting queue pointers. A guest generating burst traffic could crash the host...

CVE-2026-120830

A flaw was found in libslirp in icmpforwarderror. When building an ICMP error response, the length of the quoted original IPv4 packet was taken from the IP header without clamping it to the actual buffer length. A truncated or malformed packet could cause an out-of-bounds heap read, leaking host...

CVE-2026-120752

A flaw was found in PyMuPDF. An attacker who controls input passed to the free text annotation feature can exploit this vulnerability to execute arbitrary code or cause a denial of service DoS by crashing the application. This issue is caused by copying caller-supplied callout points into a...

CVE-2026-99237

A flaw was found in the Linux kernel's tracing subsystem. A race condition exists due to missing locking when resetting trace data during concurrent reader operations. A local attacker with access to tracing interfaces can exploit this vulnerability by performing concurrent file operations,...

CVE-2026-116014

A flaw was found in open62541. This vulnerability allows a malicious Open Platform Communications Unified Architecture OPC UA server to trigger arbitrary code execution or a Denial of Service DoS on connecting client applications. By supplying specially crafted, oversized custom data type...

CVE-2026-120740

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash,...

CVE-2026-96639

A flaw was found in Pillow. When processing multi-frame images that transition between different color modes, Pillow reuses an undersized native memory buffer without verifying that its format matches the subsequent frame. A remote attacker can exploit this flaw by providing a specially crafted...

CVE-2026-29508

A flaw was found in minidlna. This vulnerability allows a remote attacker to achieve arbitrary code execution or cause a Denial of Service DoS by placing a specially crafted DFF audio file into a directory monitored by the service. When processing the file, the application fails to validate an...

CVE-2026-118769

A flaw was found in Botan. An attacker can exploit an unchecked integer truncation in the C programming interface by supplying untrusted algorithm parameters that specify a variable-block-size cipher. This flaw causes the application to allocate an undersized memory buffer, resulting in heap memo...

CVE-2026-99239

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP subsystem. A race condition between concurrent socket bind and connect operations allows a communication channel to be attached to a connection multiple times. A local attacker can exploit this fla...

CVE-2026-120067

A flaw was found in postgresql-odbc. When processing updatable database queries, the driver copies internal row metadata into a fixed-size memory buffer without verifying the data length sent by the server. A malicious database server or an untrusted user capable of creating custom database views...

CVE-2026-120066

A flaw was found in postgresql-odbc. This issue leads to information disclosure and potential unauthorized file modification due to insecure log file creation in shared temporary directories. When logging is enabled on Unix-like systems, the driver creates world-readable log files with predictabl...

CVE-2026-120059

A flaw was found in postgresql-odbc. When processing updatable cursors, the driver improperly uses a server-provided column name as a format string when constructing query statements. A malicious database server or an attacker able to create a table with a specially crafted column name can cause...

CVE-2026-99240

A flaw was found in the Linux kernel's Data Access Monitor DAMON subsystem. A local user can trigger a division-by-zero error by configuring a monitoring scheme with a quota target value of zero. This failure can cause the kernel to crash, resulting in a Denial of Service DoS...

CVE-2026-99217

A flaw was found in the Linux kernel. A race condition during process creation cleanup can cause an internal deadlock when a process creation operation fails while closing an associated file descriptor. A local user could exploit this vulnerability to cause a Denial of Service DoS by preventing n...

CVE-2026-120065

A flaw was found in postgresql-odbc. When handling updatable cursors, the driver fails to properly sanitize quotation marks in column names before inserting them into internal database queries. An authenticated database user with permission to create tables, or an untrusted database server, can...

CVE-2026-120062

A flaw was found in postgresql-odbc. When an application passes untrusted table or schema names to the SQLSpecialColumns catalog function, the driver fails to properly escape the input before concatenating it into internal database queries. An attacker able to supply crafted input can execute...

CVE-2026-120061

A flaw was found in postgresql-odbc. When processing Open Database Connectivity ODBC escape sequences in SQL statements, the parser fails to properly validate buffer boundaries. An attacker capable of submitting untrusted SQL text to an application using the driver can trigger a stack-based buffe...

CVE-2026-120058

A flaw was found in postgresql-odbc. An untrusted database server can exploit this vulnerability to execute arbitrary code or cause a denial of service DoS on the client system. When cursor-based fetching is enabled, the driver determines its row cache size using the column count from the initial...

CVE-2026-120057

A flaw was found in psqlODBC. When processing large-object read loread responses from a database, the driver copies returned data into the application buffer without checking whether the data exceeds the buffer size. A malicious server or a network attacker performing a man-in-the-middle MitM...

CVE-2026-99235

A flaw was found in the Linux kernel's event tracing subsystem. A local user with permissions to configure trace event triggers could exploit this flaw to achieve privilege escalation or cause a Denial of Service DoS. The issue occurs when the kernel improperly retains a reference to compatible...

CVE-2026-99233

A flaw was found in the Linux kernel's event tracing subsystem. The kernel fails to properly verify the unique identity of trace events when updating reference counters for histogram triggers, comparing only their names. A local user with access to the tracing interface can exploit this by...

CVE-2026-99231

A flaw was found in the Linux kernel's iouring subsystem. A race condition in the waitid operation allows a request to be completed and freed while a wake-up handler is still accessing it, leading to a use-after-free vulnerability. A local user could exploit this flaw to cause a system crash,...

CVE-2026-116261

A flaw was found in libimobiledevice. This out-of-bounds read vulnerability allows a remote attacker to cause unauthorized information disclosure. By supplying manipulated input parameters to the Apple File Conduit AFC file opening routine, an attacker can cause the application to read memory pas...

CVE-2026-118026

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: GC component...

CVE-2026-120453

A flaw was found in The Sleuth Kit. When processing extended attributes on an HFS+ filesystem image, the application reads compression headers without properly validating the attribute length. An attacker could provide a specially crafted disk image to trigger an out-of-bounds memory read, causin...