2026

Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could le

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to

YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrar

mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulat

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_ma

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpc_reglist when

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inacti

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-s

In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystems_freeze_cal

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_p

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors c

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated v

In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed reso

In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently don

In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs sto

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node i

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPU

In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events S

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments T

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type o

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pin

In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CM

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed p

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow a

A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user t

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by

RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to

A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafte

A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (D

A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) vi

A heap overflow in the ghi_dmx_declare_opid_bin() function of GPAC v2.4.0 allows attackers to cause a Denial of Service

A heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) v

An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Jun

An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Ne

A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statist

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user i

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-1

An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting th