Month: June 2026

Information published. Continue reading CVE-2024-42139 ice: Fix improper extts handling→

Information published. Continue reading CVE-2026-53146 thunderbolt: Limit XDomain response copy to actual frame size→

Information published. Continue reading CVE-2026-48142 NGINX ngx_http_charset_module vulnerability→

Information published. Continue reading CVE-2026-53159 misc: fastrpc: fix DMA address corruption due to find_vma misuse→

Information published. Continue reading CVE-2026-53147 thunderbolt: Validate XDomain request packet size before type cast→

Information published. Continue reading CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.→

Information published. Continue reading CVE-2026-53236 tcp: restrict SO_ATTACH_FILTER to priv users→

Information published. Continue reading CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.→