2026

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirecto

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactivatin

In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv

Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that on

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aida Comput

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_recon

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In g

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_ur

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid chain re-validation if

In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO pa

In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a res

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface

In the Linux kernel, the following vulnerability has been resolved: net: do not write to msg_get_inq in callee NULL po

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethto

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesy

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_run_

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind an

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devl

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback fai

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use __kernel_read() for sleepable cont

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state wh

In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc

In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buffer

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW ve

In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when r

In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog to

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/sha

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content wi

pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's `directories.bin` field, it uses `p

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing al

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngim

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_creat

Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file.

The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface

Wasmtime is a runtime for WebAssembly. Starting in version 29.0.0 and prior to version 36.0.5, 40.0.3, and 41.0.1, on x8

NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference i

The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Ta

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.

The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of W

malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8

In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag A

In the Linux kernel, the following vulnerability has been resolved: rust_binder: remove spin_lock() in rust_shrink_free

In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939_session_activate() fail if d

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing in