2026

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data

In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_bl

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed c

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_gra

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is di

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory Duri

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error hand

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITE

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuff

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor comp

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under cer

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space

Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attacker

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate th

A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggre

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handl

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as

If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a

An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistenc

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leadin

A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the

By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressi

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a deni

The Emailchef plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_li

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id at

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Ext

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to c

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By cr

The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and incl

The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and inclu

The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_r

The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in al

The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests'

The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' (buzz_c

The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in

The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `slideShowProSC`

The Text Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ts` shortcode in a

The CI HUB Connector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `ci

The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.

The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-bu

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to a