Month: July 2026

Information published. Continue reading CVE-2026-53332 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd→

Information published. Continue reading CVE-2026-53345 KVM: Don’t WARN if memory is dirtied without a vCPU when the VM is dying→

Information published. Continue reading CVE-2026-53354 arm64: errata: Mitigate TLBI errata on various Arm CPUs→

Information published. Continue reading CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation→

Information published. Continue reading CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message→

Information published. Continue reading CVE-2026-38969 ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.→

Information published. Continue reading CVE-2026-38968 ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.→

Information published. Continue reading CVE-2026-14191 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader→