2026

OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect wit

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP

An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escal

Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulner

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data t

When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whethe

In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c Th

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pri

In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In se

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicio

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers w

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code

The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate P

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in n

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in t

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fs_compress_wr

In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wbs_w

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec->used in journal-replay file

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate control reques

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx->remote

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal races w

In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit

In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and mem

In the Linux kernel, the following vulnerability has been resolved: reset: gpio: fix double free in reset_add_gpio_aux_

In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware b

In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware b

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interfa

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to c

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: Set buffer sampling frequency

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for sp

In the Linux kernel, the following vulnerability has been resolved: gpib: fix use-after-free in IO ioctl handlers The

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow in h

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SP

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in intel_p

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner we

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch prec

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver remo

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket i

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_p

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Loa

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_con

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expe