2026

Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notificatio

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of s

A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to

A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.0

A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Pro

A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before

A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows at

A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box befo

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute

In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This cou

In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to impro

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource ex

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due t

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could

In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due

In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustio

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to imprope

In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper in

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

The WP Nano AD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘blogrole_link’ parameter in al

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The impacted elem

A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_wor

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches(

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dc_link NULL handling in HPD i

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gfx3d: add parent to parent request map

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: clear stale link mapping of ahvif->li

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_s

In the Linux kernel, the following vulnerability has been resolved: AppArmor: Allow apparmor to handle unaligned dfa ta

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: don't explicitly disable clock

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when r

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Avoid NULL dereference in linehandle_cr

In the Linux kernel, the following vulnerability has been resolved: spi: wpcm-fiu: Fix potential NULL pointer dereferen

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr

In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning conditi

In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attack

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive i

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attack

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive in

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive informa

Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to ac