2026

In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the me

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attac

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges

Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to ex

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to v

The affected product creates a directory with insecure default permissions during administrative installation. This allo

The affected product extracts installation files to a temporary directory with incorrect default permissions during admi

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability

MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability

gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmo

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of unt

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use iss

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between n

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds writ

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improp

A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Ta

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating co

Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork

In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_

IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with low‑privileged acces

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_g

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in qd_put Commit a47

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before usin

In the Linux kernel, the following vulnerability has been resolved: serial: caif: fix use-after-free in caif_serial ldi

In the Linux kernel, the following vulnerability has been resolved: power: supply: act8945a: Fix use-after-free in powe

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix watch_id bounds checking in debug a

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25980: Fix use-after-free in power

In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_bms_vm: Fix use-after-free in

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix use-after-free in

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix double free issue for tx spare buffe