Apple Multiple Products Buffer Overflow Vulnerability

net: skbuff: preserve shared-frag marker during coalescing

crypto: algif_aead - Revert to operating out-of-place

Glibc: buffer overflow in ld.so leading to privilege escalation

Apache HTTP Server Privilege Escalation Vulnerability

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

MongoDB Shell may be susceptible to local privilege escalation in Windows

MongoDB Compass may be susceptible to local privilege escalation in Windows

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Insights-client: unsafe handling of temporary files and directories

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

Yelp: arbitrary file read

Gimp: gimp: heap buffer overflow in read_channel_data()

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Sssd: race condition during authorization leads to gpo policies functioning inconsistently