CVE Radar

A memory allocation failure in XZ Utils could lead to denial of service or arbitrary code execution when processing specially crafted compressed files. An attacker could trigger an invalid memory write, resulting in a denial of service or arbitrary code execution.

The update removes the compromised emSign ECC Root CA - G3 root certificate and refreshes outdated certificates to prevent man-in-the-middle attacks and potential TLS connection failures in the ca-certificates package.

Multiple security issues were discovered in .NET, allowing attackers to exploit vulnerabilities in the .NET runtime and framework. Updates to .NET 8, 10, and 11 have been released to fix these issues.

A security update blocks compromised eMudhra intermediate certificates, which could enable forged TLS certificates for any domain. The update prevents browsers from trusting these certificates.

A local attacker with permission to edit specific files using sudoedit could use a time-of-check vs time-of-use vulnerability in sudo-rs to place files in arbitrary directories, and possibly escalate their privileges. This issue only affects systems configured to grant fine-grained sudoedit file editing permissions.

An attacker could possibly use the vulnerabilities to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches, and obtain sensitive information or cause Squid to crash. The vulnerabilities affect Squid, a web proxy cache server.

The authentication bypass vulnerability in qBittorrent's Web UI allows an attacker to bypass authentication via spoofed X-Forwarded-For headers. This vulnerability is fixed in qBittorrent 5.3.

The vulnerabilities in X.Org Server and Xwayland allow an attacker to execute arbitrary code or crash the server, and potentially disclose information. The issues are a double free in XKB SetGeometry TextDoodad processing and a use-after-free in the Present extension's cross-window notify path.

The Linux kernel 7.3 release includes security subsystem updates, though the text does not specify what the flaws are or what they allow an attacker to do.

The flaw in the credcheck PostgreSQL extension allows for privilege escalation via self-ALTER ROLE when password_valid_until is set, and also includes memory leaks and a heap overflow. These issues are fixed in version 6.0.

A privilege escalation vulnerability in Ubuntu Touch allowed unconfined applications to gain root access via D-Bus communication with system managers. The vulnerability has been patched in Ubuntu Touch 24.04-2.1.

A guest-to-host VM escape vulnerability in the Linux kernel's IPv4 networking stack allows guest VMs to send specially crafted network packets that can leak the host's kernel memory, crash the host, or run code as root on the host. The vulnerability, nicknamed PwnEscape, can be triggered by a local attacker as well.

Seventeen security vulnerabilities in X.Org client libraries allow out-of-bounds reads/writes, heap buffer overflows, and potential denial of service. Users should update to the patched versions of the affected libraries.

The update fixes various security vulnerabilities, including a WindowManagerService vulnerability involving PID and UID parameter mixups, in GrapheneOS. It also addresses several upstream Android vulnerabilities.

The update fixes 10 security vulnerabilities, including a critical use-after-free in prerender and six high-severity bugs in V8, DOM, Core, and SVG, which could allow an attacker to exploit memory corruption and use-after-free bugs in Chromium-based browsers.

The vulnerability lets an attacker exploit a use-after-free bug in Prerender and other components like V8, DOM, and SVG. The update fixes several security flaws in these components.

Multiple vulnerabilities in RabbitMQ Server allow attackers to perform denial of service, cross-site scripting, cross-site request forgery, authentication bypasses, and information exposure.

The flaw in golang.org/x/net and opentelemetry modules could cause security vulnerabilities in Cilium, a cloud native networking platform. The release of Cilium 1.19.9 includes security patches for these modules.

The flaw in Cilium allows incorrect deletion of new endpoints during GC iteration and silent ip6tables chain rename errors, which can lead to instability in Kubernetes networking environments. The issue is fixed in version v1.18.15, which includes security updates for several dependencies.

Multiple security vulnerabilities in the Linux kernel affecting Microsoft Azure systems could allow an attacker to compromise the system. The flaws affect various subsystems including networking, file systems, and hardware drivers.

A vulnerability in the Go x/net/idna package allows attackers to bypass hostname-based access controls and potentially escalate privileges via Punycode-encoded labels.

Multiple vulnerabilities in curl and libcurl allow for credential exposure, HSTS handling issues, denial of service, and command injection.

Multiple vulnerabilities in Apache HTTP Server allow for remote code execution, denial of service, HTTP response smuggling, authentication bypass, and sensitive information disclosure.

A remote code execution flaw in curl and libcurl allows an attacker to execute arbitrary code on Ubuntu 26.04 LTS, and other vulnerabilities allow for credential leaks, denial-of-service, and information disclosure. The vulnerabilities affect both the curl command-line utility and the libcurl library.

Multiple vulnerabilities in the U-Boot bootloader could allow for denial of service or arbitrary code execution via improper handling of NFS responses, HTTP data storage in lwIP, or DHCPv6 option length validation.

Multiple vulnerabilities in Bind DNS server can allow remote attackers to cause denial of service, perform cache poisoning, or bypass DNSSEC validation.

Multiple security vulnerabilities were addressed in openSUSE Tumbleweed ARM, including CVE-2026-93219 in the Allwinner sun4i timer, CVE-2026-98159 in the MediaTek mt7921 Wi-Fi driver, CVE-2026-89769 in the nxp-pit clocksource driver, CVE-2026-93225 in the fsl-imx8mq PHY driver, CVE-2026-8674 and CVE-2026-86805 in glibc.

A signed integer overflow in the FreeBSD TCP stack can cause timers to malfunction, leading to resource exhaustion and denial of service. This affects connections using the default FreeBSD TCP stack, potentially causing memory and port exhaustion.

Multiple vulnerabilities in the hastd replication service can lead to data leakage in metadata or prevent storage replication, allowing an attacker to potentially expose data or disrupt replication. The issues affect the hastd service in all supported versions of FreeBSD.

A heap memory corruption vulnerability in psqlODBC allows an attacker to cause a crash or memory corruption by binding more than 32,767 parameters due to the use of a signed 16-bit field.

PgBouncer 1.26.1 fixes a critical authentication bypass affecting SCRAM users and two Denial of Service vulnerabilities caused by infinite loops.

The update addresses potential vulnerabilities in sandbox permission approval isolation in VS Code. The changes restrict root sandbox configuration to shared deny rules and support per-server sandbox access grants.

Podman 6.1.4 updates gvproxy to v0.9.0 to resolve CVE-2026-107935.

Envoy Proxy version 1.38.7 addresses CVE-2026-54786 by bumping wasmtime to 24.0.10.

Tor Browser 15.0.25 addresses specific bugs and includes critical security updates for Firefox, OpenSSL, and NoScript. The release backports security fixes from Firefox 158 and updates core components.

The vulnerabilities in the Linux kernel OEM subsystem could potentially allow an attacker to compromise a system, affecting various subsystems including networking protocols, file systems, and hardware drivers. Users running Ubuntu OEM kernels should apply the updates to mitigate risks.

A critical vulnerability in AMD processors could allow attackers to compromise SEV-SNP guest memory integrity by failing to perform proper Reverse Map Table checks during IOMMU access. The issue affects the Linux kernel, specifically impacting SEV-SNP memory integrity.

The vulnerabilities in the Linux kernel could allow a local attacker to cause a system crash via a null pointer dereference, and the update fixes flaws across various architectures and subsystems. The update addresses security flaws in multiple architectures, including ARM64, RISC-V, and x86, to prevent system instability and potential exploits.

An attacker could possibly use several security issues in the Linux kernel to compromise the system. The issues affect various architectures and subsystems, including networking, file systems, and device drivers.

The PostgreSQL JDBC driver update version 42.7.14 addresses two security vulnerabilities identified as CVE-2026-107314 and CVE-2026-107315.

A security vulnerability in CIA file handling allowed malicious CIA files to execute arbitrary code on the host system during local installation. This flaw has been patched in version 2126.2.

Multiple vulnerabilities in the BlueZ Bluetooth stack could allow an attacker to cause denial of service, arbitrary code execution, or sensitive information exposure through memory corruption and improper parsing.

Multiple vulnerabilities in libxml2 allow attackers to cause denial of service through crashes or excessive resource consumption, execute arbitrary code via heap-based buffer overflows in large qualified names and XPointer expressions, and perform XXE or SSRF attacks due to missing parser option application during XInclude processing.

A NULL pointer dereference vulnerability in libde265 allows attackers to crash applications via crafted H.265 bitstreams, resulting in a denial of service. This flaw can be exploited by an attacker to cause application crashes.

Malicious NetPlay hosts could cause excessive RAM reservation or unauthorized writes to the Wii NAND, and a buffer overflow vulnerability could be triggered by maliciously crafted save states in the Dolphin Emulator.

Two vulnerabilities in the oauth2 and api_key_auth filters can cause service crashes when processing requests without a :path header, such as CONNECT requests.

A memory exhaustion vulnerability in gRPC via HTTP/2 DATA frame fragmentation could cause resource exhaustion in Prometheus, and several histogram-related bugs have been fixed. The security patch for gRPC is important for users running Prometheus in environments where HTTP/2 traffic could be manipulated.

The Mastodon v4.7.3 release fixes several security issues, including an issue where account data remained after deletion and a thread leak in the aws-sdk-s3 dependency. It also fixes a bug where moderators could issue warnings to moderators of a higher position.

Flatpak 1.19.2 addresses several vulnerabilities including privileged file overwriting, unauthorized file deletion, OCI repository authentication token exposure, and denial of service via process signaling or malicious .desktop/.service files.

KeePassXC 2.8.0-beta1 addresses several vulnerabilities, including a use-after-free bug in KDB file imports (CVE-2026-69150), browser extension injection, and out-of-bounds writes.

The vulnerabilities in OpenSSL allow for high and medium severity risks, which are fixed in the new Alpine Linux releases. Users should update to mitigate these risks.

The Luanti voxel engine has critical security vulnerabilities affecting both the client and server, which can be patched by upgrading to version 5.17.0. Users and server administrators are advised to upgrade immediately to protect players and server hosts from potential exploits.