2026

Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI ru

Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configura

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass d

Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability m

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM conta

NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/op

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite p

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Wa

Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This is

Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This

Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.

Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man

Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man

Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Es

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registratio

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.6.1

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n

When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call wit

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1

A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a we

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) store

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_

FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. T

A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leadin

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc

IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset funct

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view u

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view d

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest funct

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry fu

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php fil

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_ge

In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size