2026

Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensi

Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to acce

The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenti

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local a

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_loc

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exi

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVI

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flag

In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WAR

In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controll

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status L

Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI ru

Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configura

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass d

Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability m

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM conta

NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/op

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite p

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Wa

Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This is

Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This

Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.

Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man

Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Man

Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Es

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registratio

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.6.1

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n

When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call wit

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1

A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a we

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) store

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_