CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

CVE-2026-107938

A flaw was found in Apache CXF's Netty-based HTTP client transport. This flaw enables information disclosure because the client fails to verify that the server's identity matches the host name in the Transport Layer Security TLS certificate. A network attacker capable of intercepting traffic coul...

CVE-2026-119364

A flaw was found in ProFTPD. An authenticated remote attacker can bypass write restrictions and overwrite files in protected locations due to a symbolic link symlink following flaw in the modcopy module. By creating a symlink in a writable directory pointing to a restricted target, an attacker ca...

CVE-2026-119426

A flaw was found in phpMyAdmin. A remote attacker can execute arbitrary database queries by bypassing cross-site request forgery CSRF token validation on standard HTTP POST requests. By tricking an authenticated user into submitting a crafted cross-site request, an attacker can execute SQL comman...

CVE-2026-99018

A flaw was found in the Linux kernel's RISC-V architecture support. When Shadow Call Stack SCS, a security feature designed to protect function return addresses, is enabled, the kernel incorrectly validates whether an exception originated from userspace using a user-modifiable register. An...

CVE-2026-119280

A flaw was found in MariaDB Connector/J. A malicious database server or an attacker intercepting network traffic can trigger a Denial of Service DoS by returning crafted transaction identifier lengths during distributed transaction XA recovery. Because the connector does not validate these length...

CVE-2026-119133

A flaw was found in Wasmtime. An attacker capable of supplying an untrusted WebAssembly Wasm module can cause undefined behavior in the host application. When processing a module containing an odd number of exception tags while exception handling is enabled, Wasmtime improperly aligns host fields...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

CVE-2026-119124

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by tricking a user or system into processing a specially crafted image file with the -morph option. This action triggers a heap-based buffer overflow where data is written beyond allocated memory boundaries, corrupting...

CVE-2026-119123

A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service DoS by submitting a specially crafted image file for processing. When the Digital Negative DNG decoder is disabled, processing the file triggers a stack overflow in the TIFF decoder, leading to an...

CVE-2026-98989

A flaw was found in the Linux kernel. A local user can exploit this vulnerability by performing recursive bind mounts containing mount namespace file descriptors, bypassing loop detection mechanisms. This issue creates cyclical mount references, preventing the kernel from freeing associated...

CVE-2026-98988

A flaw was found in the Linux kernel. When creating a new mount namespace using the opentree system call, child and covered mounts are not properly preserved during namespace copying. A local attacker can exploit this vulnerability to reveal and access sensitive filesystem paths intentionally...

CVE-2026-98945

A flaw was found in the Linux kernel's Steam Human Interface Device HID driver. A timing issue during the device teardown sequence allows scheduled background tasks to access memory after it has been freed. A local attacker could exploit this use-after-free condition to cause a system crash,...

CVE-2026-98938

A flaw was found in the Linux kernel's Rust interrupt handling subsystem. During interrupt request IRQ registration, an interrupt can be serviced before the registration structure is fully initialized, causing the callback handler to access uninitialized memory. A local attacker could exploit thi...

CVE-2026-98933

A flaw was found in the Linux kernel's USB hub driver. An excessive hold time during the resume of USB root hubs causes instability in runtime power management on certain platforms. A local user running software that frequently wakes and polls the USB subsystem can trigger this issue, leading to ...

CVE-2026-98932

A flaw was found in the Linux kernel's Altera EDAC Error Detection and Correction driver. In device setup error-handling paths, driver memory is released before the associated interrupt handlers are unregistered. If an interrupt fires during this cleanup window, the handler dereferences freed...

CVE-2026-98928

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. A local privileged user can cause a Denial of Service DoS by initializing a virtual machine with inconsistent Scalable Vector Extension SVE settings. This condition leads to a null pointer dereference whe...

CVE-2026-98924

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS when attempting to unmount a filesystem after its underlying storage device has been disconnected while in use. During cleanup, the kernel repeatedly rescans cached file metadata structures without making...

CVE-2026-98922

A flaw was found in the Linux kernel's IBM EMAC Ethernet Media Access Controller network driver. During device initialization, the driver attempts to attach the physical network interface before network device operations are configured, causing a null pointer dereference. A local user capable of...

CVE-2026-98920

A flaw was found in the Linux kernel's netfs subsystem. Direct memory pool allocations bypassed required memory tracking hooks when memory profiling debug features are active. A local user accessing files on a network file system can trigger repeated kernel warning messages, which may lead to a...

CVE-2026-98912

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem. An inverted buffer size check in the OSS Open Sound System sequencer read handler allows a local user to cause memory corruption. Because the kernel checks buffer bounds incorrectly, it copies event data into...

CVE-2026-98916

A flaw was found in the Linux kernel's nl80211 wireless subsystem. A local user with network administration privileges could cause a Denial of Service DoS by requesting a Basic Service Set BSS color change on an inactive or non-beaconing wireless link. Because the interface fails to verify that t...

CVE-2026-98093

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture fslmicfil audio driver. A local user can cause a Denial of Service DoS or system instability by repeatedly configuring or freeing audio stream parameters. Because the driver enables and disables the master audio clock...

CVE-2026-98914

A flaw was found in the Linux kernel's amdgpu graphics driver. The driver fails to limit the nesting depth during the execution of ATOM command tables, allowing unbounded recursion. A local user could trigger excessive recursion to cause a kernel stack overflow, leading to a system crash and Deni...

CVE-2026-98919

A flaw was found in the Linux kernel's Intel Xe graphics driver. Improper calculation handling and missing zero-value checks during graphics idle delay configuration can lead to integer overflows or a division-by-zero error. Under certain hardware initialization states or driver operations, this...

CVE-2026-98918

A flaw was found in the Linux kernel's DAMON Data Access Monitoring subsystem. A local user could cause a Denial of Service DoS or memory corruption on ARM64 systems due to improper handling of unaligned memory addresses during page table operations. When the kernel samples memory access, an...

CVE-2026-98946

A flaw was found in the Linux kernel's drm/vc4 graphics driver. During runtime power suspend transitions, the driver does not properly disable hardware interrupts before powering down the device. A local user triggering power transitions could cause interrupt handlers to execute while the hardwar...

CVE-2026-98990

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or unexpected system behavior by unmounting filesystem submounts that are still actively in use. During the removal of propagating mount trees, the kernel fails to verify that a submount is free of active...

CVE-2026-98944

A flaw was found in the Linux kernel's Steam Controller HID Human Interface Device driver. This issue allows a local user to cause a Denial of Service DoS by triggering a device registration failure. During an unsuccessful registration sequence, the driver fails to properly unregister the battery...

CVE-2026-98941

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a denial of service DoS and system crash by writing encrypted data to an ext4 filesystem when encryption is enabled after mounting. This occurs because the filesystem bypasses compatibility checks for large memory bloc...

CVE-2026-98940

A flaw was found in the Linux kernel's Qualcomm audio driver LPASS CPU. When configuring digital audio interfaces on certain platforms, the driver uses a hardware port identifier instead of the table index to update playback constraints. This issue causes an out-of-bounds memory write, which can...

CVE-2026-98939

A flaw was found in the Linux kernel's x86 memory management subsystem. Under memory pressure on systems with discrete graphics processing units GPUs, a circular locking dependency can occur between memory reclamation and page table freeing routines. A local user could exploit this flaw to cause ...

CVE-2026-98936

A flaw was found in the Linux kernel's ath11k wireless driver. During hardware restart events, the driver fails to properly reset its connected station counter. Consequently, the driver falsely reports that the connection capacity has been exceeded, resulting in a Denial of Service DoS where new...

CVE-2026-98925

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter sockmap subsystem. This flaw allows a local attacker to cause a Denial of Service DoS when redirecting network traffic back to the originating socket. The kernel improperly double-counts sequence numbers for received TCP Transmissi...

CVE-2026-98917

A flaw was found in the Linux kernel's PA-RISC architecture support. This vulnerability can lead to a Denial of Service DoS when deep call chains cause a kernel stack overflow on 64-bit systems. A local user executing complex or resource-intensive workloads can trigger this condition, causing the...

CVE-2026-98985

A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability by invoking the pivotroot system call with a file descriptor referencing an unmounted filesystem whose parent mount has already been freed. This flaw allows the kernel to access previously released memor...

CVE-2026-98986

A flaw was found in the Linux kernel's mount namespace subsystem. When cleaning up a mount namespace associated with filesystem notification marks, the kernel improperly attempts to acquire a sleeping lock within an invalid interrupt context. A local user with privileges to manage mount namespace...

CVE-2026-98930

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. A local user with access to the KVM interface can trigger a Denial of Service DoS by injecting a stop and store status signal into an already stopped virtual CPU vCPU. In this scenario, th...

CVE-2026-98934

A flaw was found in the Linux kernel's IPv6 Segment Routing SRv6 subsystem. This vulnerability can lead to a Denial of Service DoS when the kernel processes certain encapsulated packets—such as discovery traffic lacking socket or device associations—while segment routing flow labeling is enabled...

CVE-2026-98923

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by triggering an unexpected kernel warning on ARM64 systems. By establishing a restricted memory mapping and reading process details through the /proc interface, the kernel incorrectly flags valid user protection...

CVE-2026-98926

A flaw was found in the Linux kernel's AMD display driver. During Display Power Management Signaling DPMS sequences, the driver attempts to access a display sink pointer without verifying whether it is null. A local user could exploit this flaw during display power state transitions, triggering a...

CVE-2026-98931

A flaw was found in the Linux kernel's Memory Technology Device MTD SPI-NAND driver. When probing a flash memory device configured without an Error Correction Code ECC engine, the driver attempts to access an uninitialized pointer. A local user could exploit this flaw to crash the system, resulti...

CVE-2026-98921

A flaw was found in the Linux kernel's OverlayFS subsystem. When debug logging is enabled, a directory creation operation can trigger a use-after-free condition by referencing a directory entry that has already been released by the virtual file system. A local user could exploit this flaw to cras...

CVE-2026-98942

A flaw was found in the Linux kernel's schedext extensible scheduler subsystem. Due to a race condition, internal core-ID mapping tables were exposed before being fully initialized and were modified without adequate synchronization. A local attacker could exploit this timing issue during schedule...

CVE-2026-118773

A flaw was found in glob, which can lead to a Denial of Service DoS. When an application attempts to cancel an active file search or encounters a timeout, the library fails to properly halt execution and continues scanning directories in the background. A remote attacker can exploit this issue by...

CVE-2026-119272

An out of bounds read flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569012543...

CVE-2026-119189

A flaw was found in node-forge. The certificate verification mechanism fails to enforce path length constraints on Certificate Authority CA certificates that lack a key usage extension. A remote attacker with control of a subordinate certificate can exploit this flaw by presenting a certificate...

CVE-2026-118778

A flaw was found in node-forge. The Transport Layer Security TLS client improperly validates whether a server certificate was provided during the handshake. A malicious server or an on-path attacker can exploit this flaw by omitting the certificate message, triggering an uncaught exception that...

CVE-2026-119208

A flaw was found in pypdf. An attacker can cause a Denial of Service DoS by providing a crafted, encrypted PDF document containing a forged page count. When an application attempts to retrieve the page count, pypdf trusts the unvalidated declared value rather than verifying the page tree, resulti...

CVE-2026-119284

A flaw was found in joserfc. A remote attacker can trigger a Denial of Service DoS by submitting specially crafted compact JSON Web Signature JWS tokens that exhaust process memory. The library parses and splits input bytes into individual segments before enforcing aggregate size limits, causing...