2026

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code executio

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted fil

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS com

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS comma

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

When a process calls execve(2) to execute a setuid or setgid image, hwpmc(4) is supposed to detach PMCs owned by unprivi

The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket b

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object. This is intended to

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, res

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Di

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-bound programs bound

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_cl

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds acces

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:se

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_e

In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in t

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes t

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_creat

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculati

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow c

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration orderi

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_a

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queu

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size t

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 wor

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before free

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from us

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videom