2026

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_si

The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c sn

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to in

Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows atta

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when install

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to imp

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setu

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files b

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manag

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Man

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private ke

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege manageme

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due t

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A l

compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Serv

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an au

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicl

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer point

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps

In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500

In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufs_me

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds r

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared dom

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregi

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_da

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() properly

In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_moun

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue call

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output st

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_eve

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadata_d

In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount Duri

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dm

In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust agai

In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resum

In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit machine