2026

In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ct

In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobe_exp

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't leak the user namespace when the

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't let an 'F' entry pin its own ins

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() for t

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_rang

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Una

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digifac

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in ump_to_endpo

In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmidi e

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initialize_timer

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/un

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_faul

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by addin

In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: fix memory leak in udp_tunnel_nic_

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature reg

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas d

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch pat

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk

In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_drop_skb() for AF_XDP m

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for res

In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtm_tos in mpls_getroute() m

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a

Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key perm

A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application exe

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions p

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user to

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-

On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-ban

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Dir

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers wi

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the U

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `