2026

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the

In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact c

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-fee

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and

In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every c

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet s

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_re

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remo

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_asyn

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/read

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only find

The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.10.1

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executio

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations m

FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc fil

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and A

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decod

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter

In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend (ePA Aktensyste

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that a

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ss

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src

sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators t

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the P

sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allo

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated at

Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administ

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs()

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_w

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when queryi

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-f

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode()

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds c

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe erro

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regi

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in d

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() in

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mb

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init(

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTL

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on A

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup fa