Aggregator

A vulnerability marked as very critical has been reported in Linux Kernel. The affected element is the function rzv2h_ivc_transfer_buffer of the component Rzv2h-ivc. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2026-53380. The attack can be initiated remotely. There is not any exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as very critical was found in Linux Kernel up to 7.1.1. This impacts the function fuse_release_end of the component Virtiofs. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-53381. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Drm Msm. The manipulation results in state issue. This vulnerability is identified as CVE-2026-53377. The attack is only possible with local access. There is not any exploit available.

A vulnerability was found in Linux Kernel. It has been rated as very critical. This affects the function drm_colorop_atomic_destroy_state/drm_colorop_reset/drm_colorop_cleanup of the component Colorop. This manipulation causes memory leak. This vulnerability is tracked as CVE-2026-53378. The attack is possible to be carried out remotely. No exploit exists. To fix this issue, it is recommended to deploy a patch.

A vulnerability labeled as critical has been found in Linux Kernel. Impacted is the function ov8856_init_controls of the component OV8856 Driver. Executing a manipulation can lead to uninitialized resource. This vulnerability is registered as CVE-2026-53379. It is possible to launch the attack remotely. No exploit is available. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Linux Kernel and classified as very critical. Affected is the function kfd_ioctl_get_process_apertures_new of the file drm/ of the component Drm Amdkfd. Executing a manipulation of the argument num_of_nodes can lead to memory corruption. The identification of this vulnerability is CVE-2026-53376. The attack may be launched remotely. There is no exploit available. Applying a patch is advised to resolve this issue.

A vulnerability identified as very critical has been detected in Linux Kernel. This issue affects some unknown processing of the file drm/amdgpu/vce of the component Drm Amdgpu Vce. Performing a manipulation results in Local Privilege Escalation. This vulnerability is cataloged as CVE-2026-53375. The attack must be initiated from a local position. There is no exploit available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in Linux Kernel. It has been classified as very critical. Affected by this vulnerability is the function amdgpu_bo_create_kernel of the component amdgpu. The manipulation leads to use of uninitialized variable. This vulnerability is referenced as CVE-2026-53374. Remote exploitation of the attack is possible. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability identified as critical has been detected in OpenSIPS up to 3.6.5. This affects an unknown part of the component SDP bandwidth-line parsing logic. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2026-46334. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅

A vulnerability classified as problematic was found in Systerel S2OPC 1.7.3. Affected by this issue is some unknown functionality of the file address_space_bs.c. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2026-67871. The attack can be launched remotely. No exploit exists.

A vulnerability labeled as critical has been found in HDF Group HDF5 up to 2.3.0. This affects the function H5Z__nbit_decompress_one_byte/H5Z__nbit_decompress_one_nooptype/H5Z__nbit_decompress_one_atomic of the file H5Znbit.c of the component N-Bit Filter. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-19027. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as critical, has been found in mz-automation lib60870 2.4.0. This affects the function FileSegment_encode of the component FileSegment. This manipulation causes buffer overflow. This vulnerability appears as CVE-2026-67873. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. This vulnerability is cataloged as CVE-2026-18969. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability described as problematic has been identified in HDF Group HDF5 up to 2.3.0. Affected is the function H5Z__filter_fletcher32 of the file H5Zfletcher32.c. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-19028. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Open Library Foundation VuFind 4.1/11.0.3 and classified as critical. Impacted is the function VuFind\Controller\AbstractBase::validateAccessPermission. Executing a manipulation can lead to improper access controls. This vulnerability is handled as CVE-2026-52466. The attack can be executed remotely. There is not any exploit available.

Currently trending CVE - Hype Score: 14 - Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or ...

Currently trending CVE - Hype Score: 15 - Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Currently trending CVE - Hype Score: 15 - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Currently trending CVE - Hype Score: 20 - A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.