2026

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, sp

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially craft

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privile

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, e

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates W

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pms

In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identica

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix fence put before wait in amdgpu_amd

In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory after the dev

In the Linux kernel, the following vulnerability has been resolved: media: as102: fix to not free memory after the devi

In the Linux kernel, the following vulnerability has been resolved: bcache: fix cached_dev.sb_bio use-after-free and cr

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In u

In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Fix use-after-free on USB disconnec

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xx_v4l2_op

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix use-after-free in enco

In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: move component registration to u

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2_fault() when VM_

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391

In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message b

In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pISpc output

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds rxrp

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix use-after-free and leak in lan966

In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nr_pages calculation overflow in f

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The

In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: deallocate damon_call() failure leak

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in intel_engine

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix use-after-free in timeout ob

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing le

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency wit

Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and ex

NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as

In the Linux kernel, the following vulnerability has been resolved: af_unix: read UNIX_DIAG_VFS data under unix_state_l

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in p

In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free u

In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom

A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.

The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in the configured key

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, lea

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form fiel

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When

In the Linux kernel, the following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_fre

In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standa

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to plac

OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows

OpenClaw before 2026.3.22 contains an incomplete host environment variable sanitization vulnerability in host-env-securi

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_PLUGINS_DIR environment variable,