2026

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-af

A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/fo

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vk

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to r

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to be

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer derefere

In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters with

In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selec

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove

In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU soft

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_dig

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual de

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A ch

In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt

In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/po

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dere

In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on mod

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference I

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to preven

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect i

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may a

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying i

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_

In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-b

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture remov

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose in

Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally.

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locall

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an a

Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose informati

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to el

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memor