2026

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file a

Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbit

A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted

OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service avail

Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox

Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execut

Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Ext

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when

In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_bl

In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_ind

In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callb

In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push

In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Fix double free in dma-buf feature The e

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RE

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish mode_data after clone set

In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_send

In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() me

In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Durin

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes

In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path me

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On

In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() wi

In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethern

In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_

In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee()

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before tea

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_a

In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smo

In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override

In the Linux kernel, the following vulnerability has been resolved: perf: Make sure to use pmu_ctx->pmu for groups Oli

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_

A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves

Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generat

radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows

The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. The

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv()