2026

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive in

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Y

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink heade

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in m

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference o

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_che

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connect

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitializ

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 a

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose i

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to applicat

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacke

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorize

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information lo

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application

Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could

Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authoriza

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PA

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by

A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of se

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCT

Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated

An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported version

Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected vers

The Real Estate Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions