2026

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadc

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events S

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after

In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_op

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_

In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero lengt

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPU

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node i

In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs sto

In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against

In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently don

In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed reso

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated v

In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Cur

In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Convert macros to functions to avo

In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in defer_free() before acc

In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors c

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_p

In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystems_freeze_cal

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-s

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inacti

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpc_reglist when

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_ma

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enume

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to rev

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as wel

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 befo

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Deni

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v

External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker

In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Over

Incorrect Privilege Assignment vulnerability in Modular DS Modular DS modular-connector allows Privilege Escalation.This

The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'short_link_post_title' and 'sh

The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin_sc_date_format', 'li

The Electric Studio Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin se

The WMF Mobile Redirector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in a

The WP Allowed Hosts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allowed-hosts' parameter

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vuln

The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to improper error

The Aplazo Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

The PayHere Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of da

The Stopwords for comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' parameter in all versions

The Perfit WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including,