CVE-2026-99221

A flaw was found in the Linux kernel's trusted keys subsystem. During the process of unsealing a key using a Trusted Platform Module TPM, the kernel fails to abort if the unseal operation fails, allowing a subsequent locking operation to overwrite the failure status with a success code. A local...

CVE-2026-99220

A flaw was found in the Linux kernel. A local, unprivileged attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. The issue occurs within the asymmetric key management subsystem when applying restrictions using a key that lacks identifiers, such as a...

CVE-2026-99219

A flaw was found in the Linux kernel's ftrace function tracing subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when reading tracing filter information while a kernel module is simultaneously loaded or unloaded, causing th...

CVE-2026-99218

A flaw was found in the Linux kernel's core dump subsystem. A local user can trigger a race condition during process core dump creation when releasing parked threads without proper synchronization. This issue allows the kernel to access memory after it has been freed, which could enable an attack...

CVE-2026-93325

A flaw was found in Docker Buildx. This vulnerability allows unauthorized file access and modification due to an authorization bypass in the bake build command. When a build is executed with the raw JSON progress option enabled, the required prompt for user consent before accessing files outside...

CVE-2026-121411

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending oversized display scaling dimensions to a connected client. Because the client application fails to properly bound and validate these server-supplied coordinates, processing th...

CVE-2026-121627

A flaw was found in buku. Improper sanitization of bookmark URLs in the bukuserver web interface leads to a stored cross-site scripting XSS vulnerability. A remote, unauthenticated attacker can submit a bookmark containing malicious code through the API endpoint. When an affected user views the...

CVE-2026-121410

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending a specially crafted graphics pipeline command with zero surface dimensions. Because the client fails to validate these empty dimensions, an internal assertion failure or...

CVE-2026-121408

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client application. The issue is caused by a race condition leading to a use-after-free memory error in the USB redirection component when the...

CVE-2026-121403

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending a malformed drive redirection request with truncated data to a connected client. This request causes the client's drive background worker to exit unexpectedly while leaving t...

CVE-2026-121406

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending a specially crafted graphics payload that decompresses to zero bytes. Because the client fails to account for empty output data before initializing its internal stream buffer, ...

CVE-2026-121401

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop RD Gateway can cause a Denial of Service DoS by sending an unexpected extended-authentication packet prior to tunnel authentication. Due to missing verification of the negotiated authentication context, processing this packet...

CVE-2026-121400

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Gateway RD Gateway server can cause a Denial of Service DoS by sending an incomplete control packet during an active connection. This causes the client to enter an unbounded read loop, consuming excessive central processing un...

CVE-2026-121398

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by crashing the proxy service during session termination. When the dynamic channel dump module is enabled, transmitting dynamic channel data while a client disconnects triggers a...

CVE-2026-99227

A flaw was found in the Linux kernel's iouring subsystem. A local attacker can repeatedly issue cancellation requests for asynchronous waitid operations, causing an internal reference counter to overflow and wrap to zero. This flaw leads to a use-after-free memory corruption condition, potentiall...

CVE-2026-121396

A flaw was found in FreeRDP. A remote attacker operating a malicious Remote Desktop RD Gateway can cause a denial of service DoS by sending a crafted Request to Send RTS packet with malformed authentication padding. When parsed, this invalid padding triggers an internal assertion failure that...

CVE-2026-121391

A flaw was found in FreeRDP. When parallel-device redirection is enabled, a malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS on a connecting client by sending repeated device open requests. Due to a resource management flaw, the client fails to close previous file...

CVE-2026-121390

A flaw was found in FreeRDP. A malicious remote gateway can cause a Denial of Service DoS by returning a crafted response that omits an expected server certificate field. FreeRDP fails to properly validate the missing field during Azure Active Directory AAD gateway communications, leading to an...

CVE-2026-121387

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated audio packets to a connecting client. Because the audio decoder fails to verify buffer boundaries before processing incoming frames, it attempts to read memory beyond...

CVE-2026-118250

A flaw was found in Highcharts. An attacker who controls chart series keys and data points can cause prototype pollution unauthorized modification of base JavaScript objects by providing dot-separated property paths. When the chart is rendered, the injected properties become accessible to all...

CVE-2026-121404

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service DoS by sending zero-length dynamic virtual channel data messages to the shadow server over an established Remote Desktop Protocol RDP session. Because the server fails to properly consume these empty...

CVE-2026-121402

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending a graphics reset packet with a width of zero, followed by a standard display update. Because the client fails to properly handle the zero-width dimension, it releases its prima...

CVE-2026-121394

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the connected client. When a user connects to an attacker-controlled server with RemoteFX decoding enabled, the server can transmit a specially crafte...

CVE-2026-121388

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger excessive memory allocation on the connecting client by specifying an arbitrarily large length in dynamic virtual channel messages. Because the application reserves memory before validating incoming message...

CVE-2026-111752

A flaw was found in @angular/router. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted HTTP requests containing multiple unconfigured outlet URL segments to an application using Server-Side Rendering SSR. Due to improper route validation, the router repeatedl...

CVE-2026-111751

A flaw was found in @angular/router. A remote attacker can cause a Denial of Service DoS by sending requests with oversized query parameters to applications using Server-Side Rendering SSR, where web pages are generated on the server. When navigation links are configured to preserve or merge quer...

CVE-2026-57486

A flaw was found in pupnp. A remote attacker could cause a Denial of Service DoS by sending specially crafted XML data to an affected application. Due to improper validation of null values during XML node comparisons, processing this input triggers a NULL pointer dereference that crashes the...

CVE-2026-119191

A flaw was found in node-forge. A remote attacker can exploit this vulnerability to cause a Denial of Service DoS by supplying specially crafted Abstract Syntax Notation One ASN.1 data containing deeply nested structures. Due to improper recursion depth limit enforcement and excessive memory...

CVE-2026-118626

A flaw was found in MLflow. Due to missing authorization checks within the pre-request handler configuration BEFOREREQUESTHANDLERS, an authenticated remote attacker can access restricted functionality without proper permission. This flaw allows an attacker to escalate privileges and access...

CVE-2026-118623

A flaw was found in MLflow. This vulnerability allows an attacker to execute arbitrary code in the context of the running application by tricking a user into opening a crafted file or visiting a malicious webpage. The issue stems from the unsafe deserialization reconstructing saved data objects o...

CVE-2026-118628

A flaw was found in MLflow. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability in the get-artifacts function due to improper validation of Uniform Resource Identifiers URIs. By sending a crafted request, an attacker can coerce the server to access...

CVE-2026-118625

A flaw was found in MLflow. An authenticated remote attacker can exploit a missing authorization check within the getendpoints function of the tracking server component. By triggering this functionality without appropriate permission checks, the attacker can achieve privilege escalation and gain...

CVE-2026-118624

A flaw was found in MLflow. An authenticated remote attacker can exploit a missing authorization check within the Tracking Server Jobs functionality, specifically in the findvalidator function. Successful exploitation allows the attacker to access and disclose sensitive information in the context...

CVE-2026-120648

A flaw was found in perl-CGI. When generating HTML comments, input is placed directly into comment tags without proper escaping. A remote attacker could exploit this flaw by submitting input that prematurely terminates the comment block, enabling the injection of arbitrary HTML or client-side...

CVE-2026-120647

A flaw was found in perl-cgi. A remote attacker can manipulate the filename of downloaded files by providing input containing unescaped double quotes to applications that use untrusted data for attachment names in HTTP Hypertext Transfer Protocol responses. Because the module does not properly...

CVE-2026-120645

A flaw was found in perl-cgi. When rendering option groups using the scrollinglist function, user-supplied input from request parameters is directly inserted into regular expression search patterns without proper escaping. A remote attacker can exploit this vulnerability by submitting crafted inp...

CVE-2026-120644

A flaw was found in perl-cgi. This vulnerability allows a remote attacker to inject arbitrary cookie attributes into HTTP Hypertext Transfer Protocol Set-Cookie response headers. The issue occurs because the module fails to properly validate semicolons or control characters in path, domain, and...

CVE-2026-120640

A flaw was found in perl-cgi. This vulnerability allows a remote attacker to conduct request forgery by spoofing internal request body parameters through query strings or form fields. Because the module does not distinguish between actual request payloads and user-supplied parameters, an attacker...

CVE-2026-120638

A flaw was found in perl-cgi. The redirect function decodes HTML entities in target URLs before generating the HTTP Location header. A remote attacker could exploit this vulnerability by supplying a specially crafted URL containing encoded characters that bypasses application-level URL validation...

CVE-2026-120637

A flaw was found in perl-cgi. When processing an unrecognized HTTP request method, such as OPTIONS, the module unintentionally falls back into its default offline debugging mode. A remote attacker can exploit this issue by submitting a request with an unhandled method to force the application to...

CVE-2026-120639

A flaw was found in perl-cgi, where it fails to properly validate newline characters when generating HTTP headers. When an application passes untrusted input into header fields, entity-encoded newlines or unvalidated parameters can bypass sanitization checks. A remote attacker could exploit this...

CVE-2026-120636

A flaw was found in perl-cgi. The component constructs target URLs and form actions from client-supplied request values without sufficient validation. A remote attacker can exploit this flaw by sending a specially crafted request URI Uniform Resource Identifier containing arbitrary domains or...

CVE-2026-120635

A flaw was found in perl-CGI. Due to discrepancies in how multipart form-data requests are parsed compared to standard specifications, a remote attacker can smuggle form fields past intermediate proxies and Web Application Firewalls WAFs. By submitting specially crafted multipart requests, an...

CVE-2026-120634

A flaw was found in perl-cgi. When running in persistent server environments, the internal buffer used to forward warnings to the browser is not cleared between requests. Consequently, a user can view sensitive request data or error details from another user's session in the returned HTML comment...

CVE-2026-120643

A flaw was found in perl-CGI. When constructing Uniform Resource Locators URLs, the url and selfurl functions fail to properly encode single quote characters in request paths or query parameters. A remote attacker can exploit this issue by submitting a crafted request to an application that embed...

CVE-2026-120633

A flaw was found in perl-CGI. This vulnerability allows a remote attacker to conduct web cache poisoning or redirect users to malicious websites by sending crafted Hypertext Transfer Protocol HTTP requests with untrusted host headers. Because the module trusts client-provided headers such as...

CVE-2026-120632

A flaw was found in the Perl CGI module. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted HTTP request. Due to an inefficient regular expression used when parsing multipart/related Content-Type headers, processing non-matching headers...

CVE-2026-118627

A flaw was found in MLflow. This vulnerability allows a remote attacker to execute arbitrary code by convincing a user to open a crafted file or load a malicious SHAP SHapley Additive exPlanations model. Because MLflow improperly validates user-supplied data during model deserialization, an...

CVE-2026-114550

A flaw was found in libwebsockets. When processing Message Queuing Telemetry Transport MQTT publish acknowledgment PUBACK packets, incoming network data is not properly validated, resulting in an out-of-bounds memory write. An unauthenticated remote attacker can exploit this vulnerability by...

CVE-2026-120642

A flaw was found in perl-cgi. When running under Perl's taint mode—a security feature that prevents untrusted data from being used in sensitive operations—the module returns several request-derived values without taint flags. A remote attacker could exploit this vulnerability by submitting crafte...