2026

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the year

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to d

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to di

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature l

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose informati

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose informatio

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose informati

Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t

Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead t

Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t

Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could le

Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could le

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to

Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to

YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrar

mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulat

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_ma

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpc_reglist when

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inacti

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-s

In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystems_freeze_cal

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_p

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors c

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated v

In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed reso

In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently don

In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs sto

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node i

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPU

In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events S

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments T

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type o

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pin

In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CM

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed p

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service