FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Incorrect parsing of IPv6 host literals in net/url

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: path traversal vulnerability in rsync

Rsync: info leak via uninitialized stack contents

Out of bounds read in IMAP parsing

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

Vim affected by Command injection via newline in glob()

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

ptrace: slightly saner 'get_dumpable()' logic

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

webbrowser.open() allows leading dashes in URLs