mod_proxy SSRF

Apple Multiple Products Buffer Overflow Vulnerability

crypto: algif_aead - Revert to operating out-of-place

Glibc: buffer overflow in ld.so leading to privilege escalation

Apache HTTP Server Privilege Escalation Vulnerability

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

MongoDB Shell may be susceptible to local privilege escalation in Windows

MongoDB Compass may be susceptible to local privilege escalation in Windows

An out-of-bounds memory access flaw was found in the X.Org server

A vulnerability was found in insights-client

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

Yelp: arbitrary file read

Gimp: gimp: heap buffer overflow in read_channel_data()

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA

A heap overflow flaw was found in 389-ds-base

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

Buildah: buildah allows arbitrary directory mount