Apple Multiple Products Buffer Overflow Vulnerability

net: skbuff: preserve shared-frag marker during coalescing

crypto: algif_aead - Revert to operating out-of-place

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

Gvfs: sftp: heap-based buffer overflow in read_reply()

Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

Webkitgtk: use-after-free of jscvalue function parameters

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

Heap Use-After-Free in the PKCS7_verify() Function

wifi: mac80211: remove station if connection prep fails

net: skbuff: propagate shared-frag marker through frag-transfer helpers

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

xfrm: esp: avoid in-place decrypt on shared skb frags

OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

redis-server RESTORE invalid memory access may allow remote code execution

smb: client: validate the whole DACL before rewriting it in cifsacl

PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

Privilege escalation in the Graphics: WebRender component

Code execution vulnerability in SWIG code generation in cmd/go

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

FreeRDP has Out-of-bounds Write

FreeRDP has Out-of-bounds Write

Use-after-free in the Storage: IndexedDB component

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Heap buffer overflow in libvpx

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Use-after-free in the IPC component

Sandbox escape due to integer overflow in the Graphics component

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

Libtiff: libtiff write-what-where