2026

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to acc

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attacker

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute ar

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar arch

GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function us

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When list

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index b

GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. Whe

GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function compute

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to a

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attack

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when col

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to r

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *p

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM di

In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before u

entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buf

Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authent

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avo

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ di

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and conne

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_r

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load fai

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() T

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON(

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths Wh

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the s

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up Aft

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_umo

In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges fo

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes

In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, bl

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in get_loc