2026

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction han

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied da

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification cou

XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fail

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to f

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is lo

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands wi

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to acc

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attacker

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute ar

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar arch

GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function us

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When list

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index b

GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. Whe

GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function compute

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to a

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attack

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when col

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to r

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *p

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM di

In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before u

entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buf

Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authent

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avo

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ di

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and conne

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_r

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load fai

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() T

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON(

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths Wh