CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...

CVE-2026-73193

A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...

CVE-2026-68518

A flaw was found in Glances, an open-source system monitoring tool. This vulnerability allows an attacker to bypass input sanitization by using adjacent unescaped Mustache variables. When an administrator-configured action template renders attacker-controlled process or container fields, these...

CVE-2026-62982

A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...

CVE-2026-68519

A flaw was found in Glances. This issue occurs because the --disable-config-exec option does not properly prevent on-alert action commands from executing shell operators. A local attacker with high privileges could exploit this to execute arbitrary commands, leading to high impact on...

CVE-2026-73066

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

CVE-2026-68766

A flaw was found in hashcat. This vulnerability allows an attacker to inject malicious command-line options when parsing restore files. By crafting a specially designed restore file, an attacker can append arbitrary content to files, potentially leading to arbitrary code execution on the system...

CVE-2026-65832

A flaw was found in Deskflow, a keyboard and mouse sharing application. A remote, unauthenticated Deskflow server can send specially crafted messages to a connected client, leading to an out-of-bounds read. This vulnerability could result in the disclosure of four bytes of memory at an...

CVE-2026-63409

A flaw was found in Deskflow, a keyboard and mouse sharing application. A malicious Deskflow server can send a specially crafted data packet containing an odd-length DSOP Deskflow Server Options Protocol vector to a connected client. This triggers an out-of-bounds read vulnerability in the client...

CVE-2026-18497

A flaw was found in the nothings stb TrueType library, which is used for parsing TrueType font files. A remote attacker could exploit this vulnerability by crafting a malicious TrueType Font TTF file. When an application attempts to process this malformed file, a heap buffer overflow occurs in th...

CVE-2026-74725

A flaw was found in the Linux kernel's enic driver. During device removal, a timing issue can occur where a transmit TX timeout schedules a reset operation after the device's memory has been freed. This leads to a use-after-free vulnerability, a type of memory corruption where the system attempts...

CVE-2026-74685

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the ltc4282 driver. When a negative value is passed to the ltc4282writecurr function, an incorrect type cast converts this input into a large positive value. This leads to an integer overflow, causing the current limit to...

CVE-2026-74667

A flaw was found in the Linux kernel's networking packet handling. Specifically, the packetparseheaders function does not consistently reset the Media Access Control MAC header for certain packet types on the PACKETQDISCBYPASS path. This can lead to an unset MAC header, causing a driver to perfor...

CVE-2026-74651

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker could send specially crafted Wi-Fi management frames containing a short vendor-specific information element. This could lead to an out-of-bounds read, where the system attempts to access memory beyond its allocated...

CVE-2026-74631

A flaw was found in the Linux kernel's smcrxsplice function within the net: smc component. This vulnerability arises from an imbalance in the lifetime management of splice entries, where page references are not properly handled before being passed to splicetopipe. This can lead to a reference cou...

CVE-2026-74629

A flaw was found in the Linux kernel's dibs device handling. A use-after-free UAF vulnerability exists where a dibs device interrupt handler can access dmbclientidarr after it has been freed. Additionally, a double-free vulnerability can occur if dibsdevadd fails during dibslodevprobe, leading to...

CVE-2026-74605

A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to cause a system crash or other unpredictable behavior due to a race condition during the freeing of an eventfs inode. The issue stems from improper synchronization when iterating over a specific...

CVE-2026-74590

A flaw was found in the Linux kernel's fsverity subsystem. A local attacker could exploit a race condition in the bpfgetfsveritydigest function by concurrently modifying its digestsize argument. This could lead to a system crash, resulting in a denial of service...

CVE-2026-74587

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. During peer restart handling, the system improperly releases a cached ASCONF chunk without clearing its pointer, leading to a use-after-free vulnerability. A remote attacker could exploit this by...

CVE-2026-70633

A flaw was found in TimescaleDB. An authenticated attacker with data manipulation language DML access to a compressed hypertable could exploit an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. By storing a specially crafted compressed data entry with an internal...

CVE-2026-74586

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An authenticated remote SCTP peer can trigger a use-after-free vulnerability by adding and then immediately removing a transport within the same ASCONF chunk. This can lead to a system crash, resultin...

CVE-2026-71265

A flaw was found in Domoticz. The MochadTCP component in Domoticz contains a stack buffer overflow vulnerability. This flaw occurs when the MatchLine handler processes MOCHADRFSEC messages, copying network-received data into a fixed-size buffer without proper length checks. A remote attacker on t...

CVE-2026-70635

A flaw was found in TimescaleDB. Authenticated attackers with direct data manipulation language DML access to a compressed hypertable can exploit an out-of-bounds read vulnerability. By supplying a specially crafted Simple8b selector-11 value, attackers can bypass index validation checks during...

CVE-2026-70634

A flaw was found in TimescaleDB. An out-of-bounds read vulnerability exists in the Dictionary compression reverse row iterator. Attackers with Data Manipulation Language DML access to a physical compressed database table can store specially crafted data. By performing a reverse-order scan, this...

CVE-2026-74592

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When a file is truncated, the system's integrity policy hooks are not properly instantiated, preventing the action cache flags from being reset. This oversight means that after truncation, the file is not re-collected,...

CVE-2026-74626

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB virtual ethernet device ntbnetdev. When processing incoming network packets, a failure to allocate a new buffer can lead to the removal of an existing buffer from the receive queue without replacement. Repeated occurrences of this...

CVE-2026-53624

A flaw was found in the Fiber web framework's helmet middleware. This vulnerability occurs because the middleware incorrectly checks for the HTTPS protocol, preventing the Strict-Transport-Security HSTS response header from being set. This can allow an attacker to bypass security mechanisms,...

CVE-2026-45045

A flaw was found in the GoFiber web framework's BalancerForward proxy helper. This vulnerability allows a remote attacker to spoof their IP address by manipulating the X-Real-IP header. Because the Header.Add function is used instead of Header.Set, an attacker-supplied X-Real-IP value is forwarde...

CVE-2026-74597

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 tunnel error handling. A remote attacker could send a specially crafted IPv6 ICMP Internet Control Message Protocol error packet with a malformed inner destination-options header. This could lead to memory corruption within t...

CVE-2026-78161

A flaw was found in warmcat libwebsockets. A remote attacker could exploit an out-of-bounds write vulnerability in the LECP CBOR Recording component, specifically within the reportrawcbor function. This could lead to information disclosure, data corruption, or denial of service...

CVE-2026-56452

A flaw was found in the sshd-scp component of Apache MINA SSHD, a Java library for client-side and server-side SSH. The implementation for receiving files or directories via Secure Copy Protocol SCP did not properly validate filenames. A remote attacker could exploit this by sending specially...

CVE-2026-74733

A flaw was found in the Linux kernel's gpio: pca953x driver, which manages General Purpose Input/Output GPIO expanders. The driver uses its own locking mechanism, but the pca953xirqbussyncunlock function failed to acquire the necessary lock when performing register operations. This oversight coul...

CVE-2026-74732

A flaw was found in the Linux kernel's AMD display drm/amd/display driver. When a user turns off the display over HDMI on systems with older DCE timing generators, the driver attempts to call a function istgenabled that may not be implemented. This unconditional call can lead to a NULL pointer...

CVE-2026-74726

A flaw was found in the Linux kernel's bonding module, specifically within the Active-Backup Load Balancing ALB monitor. This vulnerability arises from a race condition where the system makes decisions based on outdated network interface status. This can lead to a system crash, causing a Denial o...

CVE-2026-74693

A flaw was found in the prestera network driver in the Linux kernel. The presterafwhdrparse function reads the firmware header before checking that the firmware image contains the entire header. This oversight could allow a local attacker to provide a specially crafted, malformed firmware image,...

CVE-2026-74652

A flaw was found in the Linux kernel's amba-pl011 serial driver. The RS485 trigger high-resolution timers hrtimers can fire after the device management devm-managed port is freed. This occurs because the timers are not properly canceled before the interrupt request IRQ is freed, allowing a...

CVE-2026-74613

A flaw was found in the Linux kernel's vsock/virtio component. A race condition during the teardown of the receive RX queue can allow work to add buffers after the virtual queues virtqueues have been deleted. This can lead to a use-after-free vulnerability, which may result in a kernel panic and ...

CVE-2026-42493

A flaw was found in Xen's x86 shadow paging functionality. Operations within this feature can consume excessive resources, potentially leading to a Denial of Service DoS on the affected system. This functionality has been deprecated due to its operational cost and inherent security risks...

CVE-2026-74615

A flaw was found in the Linux kernel's vxlan module. An unprivileged user can trigger a use-after-free vulnerability by performing specific network-related operations within a new user and network namespace. This can lead to system instability, causing a denial of service, and potentially allowin...

CVE-2026-15226

A flaw was found in Canonical snapd. An attacker with low privileges, operating within a snap application's confined environment, can exploit a vulnerability in the snap-confine component. This allows the attacker to create or modify files with set-user-ID setuid attributes, enabling them to bypa...

CVE-2026-21729

A flaw was found in Loki. A remote attacker can exploit this vulnerability by sending specially crafted queries with large limits, leading to excessive memory allocation. This can cause a Denial of Service DoS by impacting the availability of the Loki service. Mitigation To mitigate this issue,...

CVE-2026-8933

A flaw was found in snap-confine, a core component of Canonical snapd. This vulnerability allows a local, unprivileged attacker to bypass security restrictions and execute arbitrary code. The flaw occurs due to an issue in how privilege boundaries are initialized when snap-confine operates with...

CVE-2026-77643

A flaw was found in Xapian xapian-core. This cross-site scripting XSS vulnerability is due to incomplete HTML escaping by the Xapian::MSet::snippet function. A remote attacker could exploit this by injecting malicious script, leading to arbitrary code execution in the user's browser context. This...

CVE-2026-74711

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem, specifically within the Power Management Bus pmbus driver. This vulnerability arises from a type confusion issue where the system incorrectly interprets data types during notification processing. An attacker could exploit...

CVE-2026-74657

A flaw was found in the Linux kernel. The fibnlmsgsize function, which estimates the size for network message buffers, incorrectly calculates the required space for nexthops when IPv4 routes contain an IPv6 gateway. This error can lead to the allocation of an undersized buffer for route...

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

CVE-2026-74593

A flaw was found in the Linux kernel's schedext component. An incorrect locking order within the scxcgrouplock function can lead to a deadlock. This occurs when certain cgroup operations, such as enabling/disabling scx or removing a cgroup, happen concurrently with cpu.weight writes. A local...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

CVE-2026-13401

A flaw was found in perl-XML-Bare. A remote attacker can exploit this vulnerability by providing specially crafted XML input with malformed attributes. This can cause the parsercparse function to enter an infinite loop, leading to a Denial of Service DoS condition where the application becomes...

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...