CVE-2026-104355

A flaw was found in Temporal Server. In a multi-cluster deployment, the server fails to verify whether inbound replication tasks apply only to global namespaces. An attacker controlling a connected peer cluster can exploit this vulnerability by sending replication updates that overwrite...

CVE-2026-102699

A flaw was found in Xen. A malicious guest domain can trigger an integer underflow when requesting cache flush operations. This calculation error leads to an excessively long processing loop in the hypervisor, causing the host system to crash and resulting in a Denial of Service DoS. Mitigation...

CVE-2026-91380

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces APIs can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an...

CVE-2026-91398

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability through the SOCKS5 Socket Secure networking protocol to compromise data integrity. Successful exploitation allows unauthorized creation, modification, or deletion of application data...

CVE-2026-91374

A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...

CVE-2026-91410

A flaw was found in the Libraries component of OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability by supplying crafted data to vulnerable application programming interfaces APIs. Successful exploitation allows the attacker to cause a partial Denial of...

CVE-2026-91394

A flaw was found in the OpenJDK Networking component. This vulnerability allows an unauthenticated remote attacker with network access to cause an information disclosure. By supplying crafted input to networking Application Programming Interfaces APIs, such as through an exposed web service, an...

CVE-2026-91382

A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted data to an application that processes input using affected 2D APIs. Successful exploitation could allow the attacker to create, modify, or delete...

CVE-2026-91332

A flaw was found in OpenJDK's Networking component. An unauthenticated remote attacker with network access can exploit this vulnerability by sending crafted input to exposed networking Application Programming Interfaces APIs. Successful exploitation allows the attacker to perform unauthorized dat...

CVE-2026-90039

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A local administrator with CAPSYSADMIN capabilities could trigger a null pointer dereference by attempting to unlock a filesystem or export via specific netlink commands before the NFSD internal tables are fully initialized...

CVE-2026-90023

A flaw was found in the Linux kernel's USB mass storage gadget function. An attacker could exploit this by providing a specially crafted input that sets the number of buffers to an invalid value, such as zero or one. This bypasses intended restrictions and leads to a null pointer dereference. The...

CVE-2026-89993

A flaw was found in the Linux kernel's dmaengine: dw-edma driver. A local attacker could exploit a timing issue where interrupt data is not fully initialized before an interrupt is requested. This could lead to a NULL pointer dereference when a shared interrupt handler is invoked, causing the...

CVE-2026-90020

A flaw was found in the Linux kernel's USB gadget subsystem. A race condition in the gadgetdevioctl function, where a pointer is read before a lock is acquired, can lead to a null pointer dereference. A local attacker could exploit this timing issue during a concurrent bind operation, potentially...

CVE-2026-89989

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When processing a file path that exceeds a certain length during hash algorithm validation, the system fails to properly handle an error condition. This mishandling leads to a system crash, resulting in a Denial of...

CVE-2026-89977

A flaw was found in the accel/ethosu component of the Linux kernel. This vulnerability occurs when the devmplatformioremapresource function fails to map a memory-mapped I/O MMIO register resource, returning an error pointer. The ethosuprobe function then incorrectly stores and later dereferences...

CVE-2026-89966

A flaw was found in the Linux kernel's huge page memory management mm/hugetlbcma. An unprivileged local user could trigger a null pointer dereference. This occurs by requesting a gigantic hugepage allocation with specific memory policy settings on systems where the Contiguous Memory Allocator CMA...

CVE-2026-89963

A flaw was found in the Linux kernel's powerpc/kexecfile component. On systems configured without reserved memory regions, a NULL pointer dereference can occur in the kexecextrafdtsizeppc64 function during extra size calculation. This can lead to a kernel panic, effectively causing a denial of...

CVE-2026-89933

A flaw was found in the Linux kernel's dps310 pressure sensor driver. When a device is enumerated using its ACPI Hardware ID HID, the driver may attempt to dereference a null pointer. This occurs because the ACPI-derived client name does not match the driver's device ID table, causing a critical...

CVE-2026-89901

A flaw was found in the Linux kernel's airspy media driver. When a streaming user disconnects and then closes the device, the airspystopstreaming function attempts to access a USB device structure that has already been cleared. This leads to a NULL dereference, which can result in a system crash...

CVE-2026-89884

A flaw was found in the Linux kernel's mtk-mdp3 media driver. A missing sanity check when looking up the System Control Processor SCP can lead to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-89863

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability, a NULL pointer dereference, occurs when the system attempts to process a SCSI command that has already been completed or aborted by the firmware. This can lead to a system crash, resulting in a Denial of Service DoS f...

CVE-2026-89845

A flaw was found in the qla2xxx SCSI driver in the Linux kernel. This vulnerability occurs due to a double-read operation on a request queue map entry during error handling. If the entry is cleared between these two reads, it can lead to a null pointer dereference, potentially causing a system...

CVE-2026-89856

A flaw was found in the Linux kernel's scsi: qla2xxx component. A misconfigured or malicious hot-plugged device could provide specific Message Signaled Interrupts MSI-X vector counts, causing an internal queue count to become zero due to truncation. This leads to an attempt to access an invalid...

CVE-2026-89835

A flaw was found in the Linux kernel's f2fs filesystem. This vulnerability occurs when the checkpointmerge feature is enabled without an active checkpoint merge thread, such as during a read-only mount. A local attacker with write access to ckptthreadioprio through sysfs could trigger a null...

CVE-2026-89807

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with CAPCHECKPOINTRESTORE capabilities could trigger a kernel NULL pointer dereference by issuing a crafted queue restore object during a CRIU Checkpoint/Restore in User-space operation. This vulnerability could lead to a...

CVE-2026-89798

A flaw was found in the rpcrdma component of the Linux kernel. A race condition can occur during the registration and removal of Remote Direct Memory Access RDMA notifications. If a device removal operation races with a new notification registration, it can lead to a NULL pointer dereference. Thi...

CVE-2026-89802

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When unwinding an OPMAPSPARSE operation, a NULL pointer dereference can occur if a subsequent operation in the same job fails. This vulnerability can be exploited by a local attacker with access to a render-node file descriptor,...

CVE-2026-87291

A flaw was found in the Java SE Networking component. An unauthenticated remote attacker can exploit this vulnerability by submitting specially crafted data to network application programming interfaces APIs, such as through a web service. Successful exploitation allows unauthorized read access t...

CVE-2026-114109

A flaw was found in uv. An attacker who convinces a user to install a malicious package can achieve arbitrary code execution. Because uv does not properly restrict entry point names, installing a crafted wheel package allows files to be written outside the intended directory, enabling an attacker...

CVE-2026-114097

A flaw was found in Dulwich. This vulnerability allows an attacker to achieve arbitrary code execution by tricking a user into running branch filtering operations on a specially crafted Git repository. Because temporary files persist between commit processing cycles, symbolic links created in...

CVE-2026-114102

A flaw was found in adm-zip. A remote, unauthenticated attacker could cause a Denial of Service DoS by submitting a malformed or corrupted ZIP archive to an application using asynchronous decompression. Because the library fails to properly handle decompression stream errors, processing the inval...

CVE-2026-114096

A flaw was found in Dulwich. When checking out specific file paths, the application improperly follows symbolic links when creating or restoring files. By tricking a user into checking out files from a maliciously crafted repository, an attacker can write arbitrary files to the local filesystem,...

CVE-2026-113270

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component...

CVE-2026-91373

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

CVE-2026-91395

A flaw was found in the Utility component of Java SE and GraalVM. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to exposed application programming interfaces APIs. A successful attack allows unauthorized modification or deletion...

CVE-2026-91375

A flaw was found in openjdk. An unauthenticated attacker with local access to the host system could leverage this vulnerability in the Libraries component by convincing a user to interact with a malicious application or by supplying crafted input through exposed application programming interfaces...

CVE-2026-91396

A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification or deletion of accessible data and cause a partial Denial...

CVE-2026-91379

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

CVE-2026-109619

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-109618

A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...

CVE-2026-112036

A flaw was found in MuPDF. A double-free memory vulnerability exists in the signature locking component when processing certain PDF documents. A remote attacker could exploit this flaw by enticing a user to open a specially crafted document, causing an application crash that results in a denial o...

CVE-2026-113681

A flaw was found in OpenImageIO. An integer overflow in the Cineon image parser causes an undersized memory buffer allocation. By tricking a user or application into processing a specially crafted Cineon image file, an attacker can trigger an out-of-bounds memory read and crash the application,...

CVE-2026-112074

A flaw was found in ncnn. An integer overflow vulnerability in the image format conversion component, specifically within the ncnn::yuv420sp2rgb function, allows a remote attacker to cause a Denial of Service DoS or memory corruption. By providing specially crafted image data for conversion, an...

CVE-2026-112073

A flaw was found in ncnn. A remote attacker could exploit this vulnerability by supplying specially crafted input to the matrix multiplication component, triggering an out-of-bounds read in the matmultransb function. Successful exploitation can lead to a Denial of Service DoS through an applicati...

CVE-2026-104025

A flaw was found in PeaZip. This vulnerability allows an attacker to achieve arbitrary code execution by convincing a user to preview an entry within a specially crafted archive file. Because the archive preview functionality does not properly sanitize file paths against directory traversal...

CVE-2026-104024

A flaw was found in PeaZip. The application relies on an incomplete list of restricted file extensions when prompting users before opening files directly from an archive on Windows. By convincing a user to open a specially crafted archive containing executable shortcut files, an attacker can...

CVE-2026-73649

A flaw was found in Velocity.js, a JavaScript implementation of the Apache Velocity template engine. An incomplete fix for a previous vulnerability allowed an attacker to bypass security filters by using unfiltered property-read expressions in templates. This enables an attacker-controlled templa...

CVE-2026-91461

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

CVE-2026-91453

A flaw was found in OpenJDK's Lightweight HTTP Server. An unauthenticated remote attacker can exploit this vulnerability over the network by sending crafted requests to exposed server Application Programming Interfaces APIs. Successful exploitation allows an attacker to perform unauthorized data...

CVE-2026-91487

A flaw was found in the OpenJDK Compiler component. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted data to exposed application programming interfaces APIs, such as through a web service. Successful exploitation could allow the attacker to read, update, or...