CVE-2026-64231

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for...

CVE-2026-58331

A flaw was found in the Moodle Database Activity module. This vulnerability allows an attacker to perform an arbitrary file read through the module's import feature. This could lead to the disclosure of sensitive information from the system...

CVE-2026-58332

A flaw was found in Moodle. This vulnerability allows an authenticated attacker to bypass another user's email-based multi-factor authentication MFA token check. While valid login credentials are still required, successful exploitation could lead to unauthorized access to another user's account...

CVE-2026-58333

A flaw was found in Moodle. An arbitrary file read risk was identified in the backup restore functionality. This vulnerability could allow an authenticated attacker to read arbitrary files on the server, potentially leading to information disclosure...

CVE-2026-45112

A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or thrott...

CVE-2026-58334

A flaw was found in Moodle. This vulnerability allows a remote attacker with administrative privileges to achieve remote code execution by exploiting the admin presets import feature. This could lead to unauthorized control over the affected system...

CVE-2026-58335

A flaw was found in Moodle. Missing group access checks in certain grade web services could allow a user to access grade and user information for students in groups they did not have permission to view. This could lead to unauthorized information disclosure...

CVE-2026-58338

A flaw was found in Moodle. The user profile page reset action did not properly implement a token to prevent Cross-Site Request Forgery CSRF. A remote attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially leading to unintended...

CVE-2026-55970

A flaw was found in Apache Thrift C++ bindings. This buffer over-read vulnerability allows a remote attacker to read beyond the intended memory boundaries. This could lead to the disclosure of sensitive information or cause the application to become unavailable...

CVE-2026-58337

A flaw was found in Moodle. The user homepage preference setting lacked a necessary token, making it vulnerable to a Cross-Site Request Forgery CSRF attack. A remote attacker could exploit this to trick a user into performing unwanted actions on the Moodle platform without their knowledge,...

CVE-2026-58340

A flaw was found in Moodle. The grade item ID number editing functionality lacked proper security measures, making it vulnerable to Cross-Site Request Forgery CSRF and Cross-Site Scripting XSS. A remote attacker could exploit these vulnerabilities to perform unauthorized actions or inject malicio...

CVE-2026-58339

A flaw was found in the Moodle Feedback activity module. Insufficient sanitization of the Feedback import error message could allow a remote attacker to perform a reflected Cross-Site Scripting XSS attack. This vulnerability enables the attacker to inject malicious scripts into a user's web...

CVE-2026-49158

A flaw was found in Apache Thrift Ruby bindings. This vulnerability, categorized as improper handling of highly compressed data, allows a remote attacker to cause a denial of service DoS through a data amplification attack. By sending specially crafted highly compressed data, an attacker can...

CVE-2026-64217

A flaw was found in the Linux kernel's netfs component. A local user can exploit this vulnerability by performing specific file I/O operations on a netfs-backed mount, leading to an overrun in the netfsextractuseriter function. This memory corruption can cause a kernel crash, resulting in a Denia...

CVE-2026-55968

A flaw was found in Apache Thrift Node.js bindings. This vulnerability, stemming from inefficient algorithmic complexity and the allocation of resources without proper limits or throttling, allows a remote attacker to cause a Denial of Service DoS. By exploiting this, an attacker can consume...

CVE-2026-58346

A flaw was found in Moodle. A site administrator could exploit a blind Server-Side Request Forgery SSRF vulnerability. This vulnerability exists in the MNet peers management functionality due to insufficient validation of peer hostnames against the cURL blocked hosts configuration. This could all...

CVE-2026-58344

A flaw was found in Moodle. The regrade action in the quiz overview report did not include the necessary token, leading to a Cross-Site Request Forgery CSRF vulnerability. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, such as regrading...

CVE-2026-58345

A flaw was found in Moodle. Insufficient capability checks in the Assignment module allowed users without the necessary permissions to allocate markers to submissions. This vulnerability could lead to unauthorized modification of assignment data, effectively granting a limited form of privilege...

CVE-2026-58343

A flaw was found in Moodle. Capability checks were missing from course assistance AI Artificial Intelligence placement web services. This could allow users to make requests to these web services without possessing the necessary permissions, potentially leading to unauthorized access to AI course...

CVE-2026-58341

A flaw was found in Moodle. The actions to enable and disable group messaging did not include the necessary token to prevent a Cross-Site Request Forgery CSRF risk. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, potentially leading to...

CVE-2026-64243

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ASoC simple-mux audio codec. A local user or process with access to the ALSA sound control interface could exploit an incorrect bounds check in the simplemuxcontrolput function. This vulnerability allows an attacker to store...

CVE-2026-48586

A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data also known as data amplification, allows a remote attacker to cause a Denial of Service DoS by sending specially crafted, highly compressed data. The affected component fails to...

CVE-2026-58348

A flaw was found in Moodle. Missing capability checks in the report builder fragment callbacks could allow authenticated users to retrieve report data that they are not authorized to access. This could lead to information disclosure...

CVE-2026-55969

A flaw was found in Apache Thrift's C++, cglib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted input. The flaw can lead to the affected service becoming unavailable...

CVE-2026-50251

A flaw was found in Unbound. A remote malicious actor can exploit a vulnerability by controlling a DNS delegation that returns specific glue records. This can cause Unbound to repeatedly clear its DNS caches, leading to a continuous Denial of Service DoS for DNS resolution. Mitigation To mitigate...

CVE-2026-57213

A flaw was found in the RabbitMQ rabbitmqfederationmanagement plugin. This cross-site scripting XSS vulnerability occurs because the consumertag field on the Federation Status page does not properly escape HTML. A user with permissions to configure a federation upstream or policy can exploit this...

CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-64252

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...

CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the SpdyHttpDecoder handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated SYNSTREAM frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This...

CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

CVE-2026-17072

A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being...

CVE-2026-64249

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

CVE-2026-59888

A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an...

CVE-2026-51300

A flaw was found in SQLite. This use-after-free vulnerability exists in the expression parsing and memory management logic. A remote attacker can exploit this by crafting malicious SQL queries, which leads to invalid memory access. This can result in an application crash and the leakage of...

CVE-2026-64247

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine Hyper-V component. A local attacker with access to a KVM guest could exploit this by providing an out-of-range Virtual Processor VP ID during a paravirtual Translation Lookaside Buffer TLB flush. This could lead to an...

CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

CVE-2026-53667

A flaw was found in React Router. The RSCErrorHandler component, used in applications leveraging unstable React Server Components RSC Application Programming Interfaces APIs, is missing crucial protocol validation. This vulnerability allows an attacker to redirect users to untrusted external...

CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...

CVE-2026-64235

A flaw was found in the Linux kernel. A local user with the ability to enable dynamic tracing on an x86 retbleed-affected platform with CONFIGCALLDEPTHTRACKING enabled could trigger a kernel panic. This occurs due to incorrect relocation of %rip-relative percpu references in dynamic ftrace...

CVE-2026-64219

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which is a...

CVE-2026-64232

A flaw was found in the Linux kernel's block subsystem. The blkinsertclonedrequest function, used in stacked driver configurations, fails to correctly recompute the number of integrity segments. This oversight can lead to a system crash, resulting in a Denial of Service DoS for a local user...

CVE-2026-57219

A flaw was found in RabbitMQ, a messaging and streaming broker. An unauthenticated remote attacker could exploit an obsolete API endpoint GET /api/auth to disclose the OAuth 2 client secret. This vulnerability occurs when the RabbitMQ management plugin and OAuth configuration are enabled, leading...

CVE-2026-64241

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...

CVE-2026-57221

A flaw was found in RabbitMQ. This vulnerability allows an authenticated user, with the ability to connect to a virtual host, to bypass authorization checks during passive queue.declare and exchange.declare AMQP 0-9-1 Advanced Message Queuing Protocol operations. This bypass enables the user to...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-57212

A flaw was found in RabbitMQ, a messaging and streaming broker. A remote attacker could exploit this vulnerability by sending oversized JSON bodies to the rabbitmqmanagement HTTP API. The API's body size check is incomplete, allowing the final combined size to exceed limits. This could lead to a...

CVE-2026-64226

A flaw was found in the Linux kernel's schedext component. This Use-After-Free UAF vulnerability occurs in the scxrootenableworkfn function. Specifically, puttaskstructp is called before scxerror dereferences p-comm and p-pid, leading to a premature freeing of the task. A local attacker could...

CVE-2026-57215

A flaw was found in RabbitMQ, a messaging and streaming broker. This vulnerability allows an attacker to establish persistent foreign bindings to reply-to destinations. This occurs because temporary queues are not properly removed, leaving behind active routing entries. This can lead to...