2026

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_I

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state managem

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record()

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix size_t signedness bug in

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtio_tra

In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmwar

In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot

In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix URB

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Fix resource leaks on errors in lineinf

In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: mcba_usb_read_bulk_callback(): fix U

In the Linux kernel, the following vulnerability has been resolved: net: phy: intel-xway: fix OF node refcount leakage

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): unanch

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory address

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size T

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in s

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash on synthetic stacktrace field us

In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report

In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make su

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dma_unmap_sg() nents The dma_unma

In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce sup

In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file fol

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series

In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71a77

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Adjust the leap state for the correct

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Allocate SSVE storage when re

In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fix U

In the Linux kernel, the following vulnerability has been resolved: fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0

melange allows users to build apk packages using declarative pipelines. From version 0.14.0 to before 0.40.3, an attacke

CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriti

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers t

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the i

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerabi

The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-agains

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_g

An issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial of service via a crafted

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denia

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposur