Apple Multiple Products Buffer Overflow Vulnerability

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

WebKitGTK Memory Corruption Vulnerability

crypto: algif_aead - Revert to operating out-of-place

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Linux Kernel Improper Privilege Management Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

ISC BIND Data Processing Errors Vulnerability

Red Hat Libuser Race Condition Vulnerability

Linux Kernel Race Condition Vulnerability

Libssh: libssh: authentication bypass via missing gssapi principal check

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation

net-snmp provides various tools relating to the Simple Network Management Protocol

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

A flaw was found in the WebKitGTK package

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

A privilege escalation flaw was found in Podman

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes…

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES)

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization

A flaw was found in the ptp4l program of the linuxptp package

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22

There's a flaw in libxml2 in versions before 2.9.11

A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID

A path traversal flaw was found in Buildah in versions before 1.14.5

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face…

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability…

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the…

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by…