2026

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sen

In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SM

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer l

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_u

In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeu

In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In

In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and

In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fred_extint

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack-out-of-bounds write in devmap get_u

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping it

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Fix metalist update behavior W

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer t

In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43

In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to pr

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_CT: drop pending enqueued packets on

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu g

In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peer_mep deletio

cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/cr

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a use

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installat

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable lo

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of

Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.4, a stack-based

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.

Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screenshots. That API reli

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.

Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0

Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbi

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticate

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is abl

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 M

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set o

An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously c

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_u

InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist

Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.336

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful explo

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under speci

The application's update service, when checking for updates, loads certain system libraries from a search path that incl

The application's list box calculate array logic keeps stale references to page or form objects after they are deleted o

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs acce

pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current