2026

Memory corruption while preprocessing IOCTLs in sensors.

Memory corruption while passing pages to DSP with an unaligned starting address.

Memory corruption when accessing resources in kernel driver.

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/un

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization ca

The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which ma

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicio

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged AP

Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary c

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.

Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge

Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat P

Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat P

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fic

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detectio

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability i

TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in name_si

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu rec

In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stat

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updatin

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-fre

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated n

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: initialize local pointers upon transf

In the Linux kernel, the following vulnerability has been resolved: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an ex

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active li

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv51

In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active lis

In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferra

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing

In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffs_epfile_

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btu

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch se

In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_over

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_sta

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_io

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access th

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of refe

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate priv

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate