[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 6 20:15:13 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
40aed0b1 by security tracker role at 2026-10-06T19:14:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,731 +1,1813 @@
-CVE-2026-77050
+CVE-2026-9226 (Authentication bypass in the Azure AD external login flow in Devolutio ...)
+ TODO: check
+CVE-2026-97308 (Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 version ...)
+ TODO: check
+CVE-2026-96890 (A Server-Side Request Forgery (SSRF) vulnerability was identified in G ...)
+ TODO: check
+CVE-2026-95594 (Unauthenticated Privilege Escalation in SMS Alert Order Notifications ...)
+ TODO: check
+CVE-2026-95526 (Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.)
+ TODO: check
+CVE-2026-95153 (An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensi ...)
+ TODO: check
+CVE-2026-95140 (kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulner ...)
+ TODO: check
+CVE-2026-95105 (Reliance on Obfuscation or Encryption of Security-Relevant Inputs with ...)
+ TODO: check
+CVE-2026-94675 (Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On ...)
+ TODO: check
+CVE-2026-94206 (Use of Password Hash With Insufficient Computational Effort vulnerabil ...)
+ TODO: check
+CVE-2026-91140 (An OS command injection vulnerability in the shell-based temporary-fil ...)
+ TODO: check
+CVE-2026-88252 (A flaw was found in sssd. A local user can cause a Denial of Service ( ...)
+ TODO: check
+CVE-2026-86362 (Dell System Update, versions prior to 2.3.0.0, contains an Improper Ac ...)
+ TODO: check
+CVE-2026-86361 (Dell System Update, versions prior to 2.3.0.0, contains an Incorrect P ...)
+ TODO: check
+CVE-2026-86360 (Dell System Update, versions prior to 2.3.0.0, contains an Improper Li ...)
+ TODO: check
+CVE-2026-85523 (Improper neutralization of special elements used in an OS command ('OS ...)
+ TODO: check
+CVE-2026-85153 (This vulnerability exists in the Schmooze app due to the use of hardco ...)
+ TODO: check
+CVE-2026-84854 (In the WibuKey driver for Windows below Version 6.72, insufficient val ...)
+ TODO: check
+CVE-2026-83550 (A flaw was found in postgres-exporter. Due to the blank import of `net ...)
+ TODO: check
+CVE-2026-82924 (Improper Control of Interaction Frequency vulnerability in Pusula Comm ...)
+ TODO: check
+CVE-2026-82531 (Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vul ...)
+ TODO: check
+CVE-2026-82162 (Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an ...)
+ TODO: check
+CVE-2026-80327 (An open redirect vulnerability exists in the PingGateway Fragment Filt ...)
+ TODO: check
+CVE-2026-77178 (Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an ou ...)
+ TODO: check
+CVE-2026-76105 (Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an ...)
+ TODO: check
+CVE-2026-75820 (GNU Aspell contains an integer truncation vulnerability in the Writabl ...)
+ TODO: check
+CVE-2026-75819 (GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDic ...)
+ TODO: check
+CVE-2026-75818 (GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerabil ...)
+ TODO: check
+CVE-2026-71168 (Dell System Update, versions prior to 2.3.0.0, contains an Improper Li ...)
+ TODO: check
+CVE-2026-70414 (Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a ...)
+ TODO: check
+CVE-2026-70411 (Dell Container Storage Modules (CSM), versions prior to 1.18.0, contai ...)
+ TODO: check
+CVE-2026-67273 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-67270 (Dell Container Storage Modules (CSM) versions prior to 1.18.0, contain ...)
+ TODO: check
+CVE-2026-67269 (Dell Container Storage Modules (CSM) Operator, versions prior to 1.18. ...)
+ TODO: check
+CVE-2026-66666 (Insertion of Sensitive Information Into Sent Data vulnerability in Aut ...)
+ TODO: check
+CVE-2026-66588 (Unauthenticated Broken Access Control in The7 <= 14.2.2 versions.)
+ TODO: check
+CVE-2026-63697 (Dell System Update, versions prior to 2.3.0.0, contains an Improper Ce ...)
+ TODO: check
+CVE-2026-63692 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-63691 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-63690 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-63689 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-63688 (Dell Container Storage Modules (CSM), versions prior to v1.18.0, conta ...)
+ TODO: check
+CVE-2026-62072 (Subscriber Broken Access Control in Progress Planner <= 1.10.0 version ...)
+ TODO: check
+CVE-2026-61421 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-61411 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-56952 (In platform_msg_handler_init of default_msg_handlers.c, there is a pos ...)
+ TODO: check
+CVE-2026-56936 (In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-o ...)
+ TODO: check
+CVE-2026-56906 (In ep_free of eventpoll.c, there is a possible use-after-free due to a ...)
+ TODO: check
+CVE-2026-56596 (HCL BigFix Service Management is affected by an Improper Input Validat ...)
+ TODO: check
+CVE-2026-55330 (In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a pos ...)
+ TODO: check
+CVE-2026-55307 (In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible informa ...)
+ TODO: check
+CVE-2026-54472 (Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a ...)
+ TODO: check
+CVE-2026-4889 (SQL injection (SQLi) vulnerability in the eLoanApp application, specif ...)
+ TODO: check
+CVE-2026-48199 (Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.)
+ TODO: check
+CVE-2026-48197 (Incorrect Privilege Assignment vulnerability in PublishPress PublishPr ...)
+ TODO: check
+CVE-2026-42638 (Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.7 ...)
+ TODO: check
+CVE-2026-42637 (Unauthenticated Settings Change in PayPlug for WooCommerce (Official) ...)
+ TODO: check
+CVE-2026-42636 (Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDP ...)
+ TODO: check
+CVE-2026-42635 (Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Aucti ...)
+ TODO: check
+CVE-2026-42634 (Unauthenticated Cross Site Scripting (XSS) in Video Background Block \ ...)
+ TODO: check
+CVE-2026-42418 (Unauthenticated Cross Site Scripting (XSS) in Social Rocket <= 1.3.5 v ...)
+ TODO: check
+CVE-2026-42417 (Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.)
+ TODO: check
+CVE-2026-42416 (Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.)
+ TODO: check
+CVE-2026-42415 (Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 ...)
+ TODO: check
+CVE-2026-42414 (Subscriber SQL Injection in ListingPro <= 2.9.12 versions.)
+ TODO: check
+CVE-2026-42413 (Unauthenticated Sensitive Data Exposure in Snapshotify – All-in- ...)
+ TODO: check
+CVE-2026-41562 (Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 vers ...)
+ TODO: check
+CVE-2026-41561 (Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.2 ...)
+ TODO: check
+CVE-2026-41560 (Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 vers ...)
+ TODO: check
+CVE-2026-41559 (Unauthenticated Sensitive Data Exposure in SafeSnap \u2013 Verified Wo ...)
+ TODO: check
+CVE-2026-41555 (Unauthenticated SQL Injection in Newsletter Subscription Form \u2013 U ...)
+ TODO: check
+CVE-2026-40807 (Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Comple ...)
+ TODO: check
+CVE-2026-40806 (Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category ...)
+ TODO: check
+CVE-2026-39798 (Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions.)
+ TODO: check
+CVE-2026-39797 (Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2 ...)
+ TODO: check
+CVE-2026-39796 (Unauthenticated Broken Access Control in Advanced Posts Listing \u2013 ...)
+ TODO: check
+CVE-2026-39795 (Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 ve ...)
+ TODO: check
+CVE-2026-39794 (Unauthenticated Broken Access Control in WooCommerce Multivendor Marke ...)
+ TODO: check
+CVE-2026-39793 (Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.)
+ TODO: check
+CVE-2026-39792 (Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 ...)
+ TODO: check
+CVE-2026-39791 (Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= ...)
+ TODO: check
+CVE-2026-39790 (Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.6 vers ...)
+ TODO: check
+CVE-2026-39788 (Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versio ...)
+ TODO: check
+CVE-2026-39787 (Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1. ...)
+ TODO: check
+CVE-2026-39785 (Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versio ...)
+ TODO: check
+CVE-2026-39784 (Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 ver ...)
+ TODO: check
+CVE-2026-39781 (Unauthenticated Cross Site Scripting (XSS) in Document Gallery <= 5.1. ...)
+ TODO: check
+CVE-2026-39780 (Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 version ...)
+ TODO: check
+CVE-2026-39778 (Unauthenticated Cross Site Scripting (XSS) in Ansar Import \u2013 One ...)
+ TODO: check
+CVE-2026-39776 (Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.)
+ TODO: check
+CVE-2026-39775 (Subscriber Privilege Escalation in JobZilla - Job Board WordPress Them ...)
+ TODO: check
+CVE-2026-39774 (Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions ...)
+ TODO: check
+CVE-2026-39773 (Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 version ...)
+ TODO: check
+CVE-2026-39772 (Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2. ...)
+ TODO: check
+CVE-2026-39771 (Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.)
+ TODO: check
+CVE-2026-39770 (Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.)
+ TODO: check
+CVE-2026-39769 (Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.)
+ TODO: check
+CVE-2026-39768 (Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan ...)
+ TODO: check
+CVE-2026-39767 (Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.)
+ TODO: check
+CVE-2026-39766 (Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 version ...)
+ TODO: check
+CVE-2026-39765 (Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.)
+ TODO: check
+CVE-2026-39764 (Unauthenticated SQL Injection in Radius Booking \u2014 Booking Calenda ...)
+ TODO: check
+CVE-2026-39762 (Missing Authorization vulnerability in Patterns In The Cloud Autoship ...)
+ TODO: check
+CVE-2026-39761 (Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions ...)
+ TODO: check
+CVE-2026-39759 (Employer / Sales Representative Arbitrary File Upload in Workreap Core ...)
+ TODO: check
+CVE-2026-39758 (Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= ...)
+ TODO: check
+CVE-2026-39757 (Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.)
+ TODO: check
+CVE-2026-39756 (Unauthenticated Insecure Direct Object References (IDOR) in Wappointme ...)
+ TODO: check
+CVE-2026-39755 (Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.)
+ TODO: check
+CVE-2026-39754 (Contributor Arbitrary File Download in Piotnet Addons For Elementor <= ...)
+ TODO: check
+CVE-2026-39753 (Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.)
+ TODO: check
+CVE-2026-39752 (Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 ver ...)
+ TODO: check
+CVE-2026-39751 (Unauthenticated Broken Access Control in PayPlug for WooCommerce (Offi ...)
+ TODO: check
+CVE-2026-39750 (Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales ...)
+ TODO: check
+CVE-2026-39749 (Subscriber Broken Access Control in App for Cloudflare\xae <= 1.10.1 v ...)
+ TODO: check
+CVE-2026-39748 (Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 version ...)
+ TODO: check
+CVE-2026-39747 (Subscriber SQL Injection in Woffice <= 5.4.35 versions.)
+ TODO: check
+CVE-2026-39746 (Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.)
+ TODO: check
+CVE-2026-39745 (Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by Be ...)
+ TODO: check
+CVE-2026-39731 (Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2. ...)
+ TODO: check
+CVE-2026-39730 (Missing Authorization vulnerability in Marcin Wise Chat wise-chat allo ...)
+ TODO: check
+CVE-2026-39729 (Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 ver ...)
+ TODO: check
+CVE-2026-39728 (Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin ...)
+ TODO: check
+CVE-2026-39727 (Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 v ...)
+ TODO: check
+CVE-2026-39726 (Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer ...)
+ TODO: check
+CVE-2026-39725 (Contributor Remote Code Execution (RCE) in Content Visibility for Divi ...)
+ TODO: check
+CVE-2026-39724 (Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= ...)
+ TODO: check
+CVE-2026-39722 (Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions ...)
+ TODO: check
+CVE-2026-39720 (Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 ...)
+ TODO: check
+CVE-2026-39719 (Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer ...)
+ TODO: check
+CVE-2026-34498 (Improper input validation vulnerability in Johnson Controls Illustra S ...)
+ TODO: check
+CVE-2026-32581 (Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.)
+ TODO: check
+CVE-2026-32580 (Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions ...)
+ TODO: check
+CVE-2026-32579 (Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPre ...)
+ TODO: check
+CVE-2026-32578 (Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= ...)
+ TODO: check
+CVE-2026-32577 (Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= ...)
+ TODO: check
+CVE-2026-32575 (Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 1 ...)
+ TODO: check
+CVE-2026-32574 (Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 v ...)
+ TODO: check
+CVE-2026-32572 (Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= ...)
+ TODO: check
+CVE-2026-32571 (Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.)
+ TODO: check
+CVE-2026-32570 (Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressiv ...)
+ TODO: check
+CVE-2026-32569 (Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 ...)
+ TODO: check
+CVE-2026-32568 (Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= ...)
+ TODO: check
+CVE-2026-32557 (Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 ver ...)
+ TODO: check
+CVE-2026-26287 (External Secrets Operator reads information from a third-party service ...)
+ TODO: check
+CVE-2026-25434 (Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.)
+ TODO: check
+CVE-2026-25433 (Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.)
+ TODO: check
+CVE-2026-12380 (Improper neutralization of input during web page generation ('cross-si ...)
+ TODO: check
+CVE-2026-106513 (MISP (Malware Information Sharing Platform) exposes critical infrastru ...)
+ TODO: check
+CVE-2026-106512 (The CakeResponse::download() method in lib/Cake/Network/CakeResponse.p ...)
+ TODO: check
+CVE-2026-106511 (MultiversX's multisig-improved (repository: mx-multisig-and-modules) r ...)
+ TODO: check
+CVE-2026-106443 (WeasyPrint helps web developers to create PDF documents. Prior to 70.0 ...)
+ TODO: check
+CVE-2026-106442 (Hydra is a framework for elegantly configuring complex applications. F ...)
+ TODO: check
+CVE-2026-106441 (Hydra is a framework for elegantly configuring complex applications. P ...)
+ TODO: check
+CVE-2026-106440 (Hydra is a framework for elegantly configuring complex applications. F ...)
+ TODO: check
+CVE-2026-106439 (Hydra is a framework for elegantly configuring complex applications. F ...)
+ TODO: check
+CVE-2026-106427 (Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106426 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106425 (Missing authorization in BrowserTag in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106424 (Information leak in Audio in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106423 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106422 (Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106421 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106420 (Incorrect calculation in API in Google Chrome on on Windows prior to 1 ...)
+ TODO: check
+CVE-2026-106419 (Use after free in ANGLE in Google Chrome on on Android prior to 155.0. ...)
+ TODO: check
+CVE-2026-106418 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106417 (Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106416 (Code injection in Extensions in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106415 (Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106414 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ TODO: check
+CVE-2026-106413 (Race condition in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106412 (Race condition in Core in Google Chrome on on Mac prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106411 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106410 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106409 (Incorrect reference resolution in WebAppInstalls in Google Chrome on o ...)
+ TODO: check
+CVE-2026-106408 (Protection mechanism failure in Mobile in Google Chrome on on iOS prio ...)
+ TODO: check
+CVE-2026-106407 (Incorrect authorization in GetUserMedia in Google Chrome prior to 155. ...)
+ TODO: check
+CVE-2026-106406 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
+ TODO: check
+CVE-2026-106405 (Race condition in CustomTabs in Google Chrome on on Android prior to 1 ...)
+ TODO: check
+CVE-2026-106404 (Incorrect authorization in FontAccess in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106403 (Incorrect authorization in Accessibility in Google Chrome prior to 155 ...)
+ TODO: check
+CVE-2026-106402 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106401 (Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106400 (Clickjacking in Messages in Google Chrome on on Android prior to 155.0 ...)
+ TODO: check
+CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS prior to ...)
+ TODO: check
+CVE-2026-106396 (Improper input validation in Omnibox in Google Chrome on on Android pr ...)
+ TODO: check
+CVE-2026-106395 (Uninitialized resource in Dawn in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106394 (Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106393 (Use after free in Storage in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106392 (Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106391 (Incorrect authorization in WebShare in Google Chrome on on Android pri ...)
+ TODO: check
+CVE-2026-106390 (Incorrect provision of specified functionality in SanitizerAPI in Goog ...)
+ TODO: check
+CVE-2026-106389 (Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106388 (Missing authorization in DataTransfer in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106387 (Missing authorization in Mobile in Google Chrome on on iOS prior to 15 ...)
+ TODO: check
+CVE-2026-106386 (Uninitialized resource in WebAudio in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106385 (Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106384 (Missing authorization in SiteIsolation in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106383 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106382 (Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106381 (Incorrect authorization in Passwords in Google Chrome on on iOS prior ...)
+ TODO: check
+CVE-2026-106380 (UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155 ...)
+ TODO: check
+CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106376 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ TODO: check
+CVE-2026-106375 (Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106374 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106373 (Use after free in Fonts in Google Chrome on on Windows prior to 155.0. ...)
+ TODO: check
+CVE-2026-106372 (Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106371 (Incorrect authorization in Transactions Platform in Google Chrome on o ...)
+ TODO: check
+CVE-2026-106370 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106369 (Missing authorization in Translate in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106368 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
+ TODO: check
+CVE-2026-106367 (Missing authorization in Mobile in Google Chrome on on Android prior t ...)
+ TODO: check
+CVE-2026-106366 (Incomplete cleanup in CustomTabs in Google Chrome on on Android prior ...)
+ TODO: check
+CVE-2026-106365 (Missing authorization in Animation in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106364 (Incorrect authorization in Omnibox in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106363 (Missing authorization in FullScreen in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106362 (Missing authorization in DevTools in Google Chrome prior to 155.0.8059 ...)
+ TODO: check
+CVE-2026-106361 (Incorrect provision of specified functionality in Mobile in Google Chr ...)
+ TODO: check
+CVE-2026-106360 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106359 (Confused deputy in DeviceBoundSessionCredentials in Google Chrome prio ...)
+ TODO: check
+CVE-2026-106358 (Use after free in Navigation in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106357 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106356 (Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106355 (Missing authorization in Media in Google Chrome on on Windows prior to ...)
+ TODO: check
+CVE-2026-106354 (Improper resource exposure in Extensions in Google Chrome prior to 155 ...)
+ TODO: check
+CVE-2026-106353 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ TODO: check
+CVE-2026-106352 (Incorrect authorization in WebProtect in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106351 (Observable discrepancy in Safebrowsing in Google Chrome on on iOS prio ...)
+ TODO: check
+CVE-2026-106350 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106349 (Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106348 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106347 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106346 (Improper state validation in DevTools in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106345 (Use of released resource in Session in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106344 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106343 (Improper state validation in Autofill AI in Google Chrome on on Androi ...)
+ TODO: check
+CVE-2026-106342 (Information leak in Autofill in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106341 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106340 (Missing authorization in CredentialProvider in Google Chrome on on Win ...)
+ TODO: check
+CVE-2026-106339 (Use of released resource in Core in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106338 (UI misrepresentation in PictureInPicture in Google Chrome on on Androi ...)
+ TODO: check
+CVE-2026-106337 (UI misrepresentation in UI in Google Chrome on on Android prior to 155 ...)
+ TODO: check
+CVE-2026-106336 (Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106335 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106334 (Information leak in Payments in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106333 (Incorrect authorization in Input in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106332 (Integer overflow in Compositing in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106331 (Improper input validation in Extensions in Google Chrome prior to 155. ...)
+ TODO: check
+CVE-2026-106330 (Information leak in Paint in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106329 (Incorrect authorization in FileSystem in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106328 (Incorrect authorization in PDF in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106327 (Incorrect authorization in Core in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106326 (Confused deputy in UI in Google Chrome on on Android prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106325 (Incorrect reference resolution in Core in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106324 (Incorrect authorization in WebAppInstalls in Google Chrome on on Andro ...)
+ TODO: check
+CVE-2026-106323 (Missing authorization in Chrome for iOS in Google Chrome on on iOS pri ...)
+ TODO: check
+CVE-2026-106322 (Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106321 (Information leak in Editing in Google Chrome prior to 155.0.8059.39 al ...)
+ TODO: check
+CVE-2026-106320 (Use of released resource in UI in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106318 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106317 (UI misrepresentation in FullScreen in Google Chrome on on Android prio ...)
+ TODO: check
+CVE-2026-106316 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
+ TODO: check
+CVE-2026-106315 (Use after free in Modularization in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106314 (Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106313 (Incorrect authorization in Browser in Google Chrome on on Android prio ...)
+ TODO: check
+CVE-2026-106312 (Missing authorization in SignIn in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106311 (Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059 ...)
+ TODO: check
+CVE-2026-106310 (Use of released resource in FontAccess in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106309 (Incorrect authorization in Selection in Google Chrome on on iOS prior ...)
+ TODO: check
+CVE-2026-106308 (Incorrect reference resolution in Autofill in Google Chrome on on Andr ...)
+ TODO: check
+CVE-2026-106307 (Incorrect authorization in Network in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106306 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106305 (UI misrepresentation in Mobile in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106304 (Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 al ...)
+ TODO: check
+CVE-2026-106303 (Observable discrepancy in Autofill AI in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106302 (UI misrepresentation in PermissionElement in Google Chrome prior to 15 ...)
+ TODO: check
+CVE-2026-106301 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106300 (Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106299 (Improper input validation in WebAudio in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106298 (Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155. ...)
+ TODO: check
+CVE-2026-106297 (Incorrect authorization in Scheduling in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106296 (Improper privilege management in UI in Google Chrome on on Mac prior t ...)
+ TODO: check
+CVE-2026-106295 (Incorrect authorization in Unbounded Element in Google Chrome prior to ...)
+ TODO: check
+CVE-2026-106294 (Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 1 ...)
+ TODO: check
+CVE-2026-106293 (Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106292 (Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106291 (Use after free in GarbageCollection in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106290 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106289 (Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106288 (Missing authorization in Browser in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106287 (Information loss in CORS in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106286 (Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106285 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106284 (Out of bounds read in Printing in Google Chrome on on Windows prior to ...)
+ TODO: check
+CVE-2026-106283 (Use after free in Streaming in Google Chrome prior to 155.0.8059.39 al ...)
+ TODO: check
+CVE-2026-106282 (UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106281 (Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106280 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
+ TODO: check
+CVE-2026-106279 (Incorrect reference resolution in Passwords in Google Chrome on on iOS ...)
+ TODO: check
+CVE-2026-106278 (Use after free in Select in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106277 (Information leak in Animation in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106276 (UI misrepresentation in Payments in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106275 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106274 (Incorrect reference resolution in Browser in Google Chrome on on Mac p ...)
+ TODO: check
+CVE-2026-106273 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106272 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
+ TODO: check
+CVE-2026-106271 (Missing authorization in Workers in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106270 (Incorrect authorization in WebAppInstalls in Google Chrome prior to 15 ...)
+ TODO: check
+CVE-2026-106269 (Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106268 (Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106267 (Missing authorization in Network in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106266 (Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106265 (UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106264 (Missing authorization in Web Authentication (Passkeys & Security Keys) ...)
+ TODO: check
+CVE-2026-106263 (Improper input validation in SignIn in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106262 (Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106261 (Uninitialized resource in Video in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106260 (Incorrect authorization in DevTools in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106259 (Incorrect authorization in PermissionElement in Google Chrome prior to ...)
+ TODO: check
+CVE-2026-106258 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ TODO: check
+CVE-2026-106257 (Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106256 (Information leak in Passwords in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106255 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106254 (Information leak in Mobile in Google Chrome on on Android prior to 155 ...)
+ TODO: check
+CVE-2026-106253 (Incorrect authorization in Extensions in Google Chrome prior to 155.0. ...)
+ TODO: check
+CVE-2026-106252 (Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106251 (UI misrepresentation in Chromoting in Google Chrome on on Mac prior to ...)
+ TODO: check
+CVE-2026-106250 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106249 (Incorrect authorization in Autofill in Google Chrome on on Android pri ...)
+ TODO: check
+CVE-2026-106248 (Use after free in Bindings in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106247 (Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106246 (Incorrect authorization in Browser in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106245 (Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106244 (Incorrect authorization in Permissions in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106243 (Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106242 (Information leak in Omnibox in Google Chrome on on Android prior to 15 ...)
+ TODO: check
+CVE-2026-106241 (Incorrect authorization in Search in Google Chrome on on Android prior ...)
+ TODO: check
+CVE-2026-106240 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106239 (Integer overflow in WebGL in Google Chrome on on Android prior to 155. ...)
+ TODO: check
+CVE-2026-106238 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106237 (Information leak in Permissions in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106236 (UI misrepresentation in Chromoting in Google Chrome on on Windows prio ...)
+ TODO: check
+CVE-2026-106235 (Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106234 (Use after free in Network in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106233 (Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106232 (UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106231 (Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155 ...)
+ TODO: check
+CVE-2026-106230 (Incorrect reference resolution in Offline in Google Chrome on on Andro ...)
+ TODO: check
+CVE-2026-106229 (UI misrepresentation in FileSystem in Google Chrome prior to 155.0.805 ...)
+ TODO: check
+CVE-2026-106228 (Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106227 (Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106226 (Improper input validation in Compositing in Google Chrome prior to 155 ...)
+ TODO: check
+CVE-2026-106225 (Missing authorization in Autofill in Google Chrome prior to 155.0.8059 ...)
+ TODO: check
+CVE-2026-106224 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106223 (Uninitialized resource in GPU in Google Chrome on on Android prior to ...)
+ TODO: check
+CVE-2026-106222 (Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106221 (Confused deputy in WebAPKs in Google Chrome on on Android prior to 155 ...)
+ TODO: check
+CVE-2026-106220 (Information leak in Passwords in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106219 (In JetBrains TeamCity before 2026.2.1 missing validation of Git submod ...)
+ TODO: check
+CVE-2026-106218 (In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox esc ...)
+ TODO: check
+CVE-2026-106217 (Missing authorization in Google Lens in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106216 (Cross-site request forgery in ReadingList in Google Chrome on on Andro ...)
+ TODO: check
+CVE-2026-106215 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ TODO: check
+CVE-2026-106214 (Information leak in Proxy in Google Chrome on on Windows prior to 155. ...)
+ TODO: check
+CVE-2026-106213 (Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106212 (Incorrect authorization in Autofill in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106211 (Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 all ...)
+ TODO: check
+CVE-2026-106210 (Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106209 (UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155 ...)
+ TODO: check
+CVE-2026-106208 (Missing authorization in API in Google Chrome prior to 155.0.8059.39 a ...)
+ TODO: check
+CVE-2026-106207 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106206 (Improper input validation in Mobile in Google Chrome on on iOS prior t ...)
+ TODO: check
+CVE-2026-106205 (Missing authorization in Passwords in Google Chrome on on Android prio ...)
+ TODO: check
+CVE-2026-106204 (Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed ...)
+ TODO: check
+CVE-2026-106203 (Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155 ...)
+ TODO: check
+CVE-2026-106202 (Uninitialized resource in ANGLE in Google Chrome on on Windows prior t ...)
+ TODO: check
+CVE-2026-106201 (Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a ...)
+ TODO: check
+CVE-2026-106200 (Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106199 (Incorrect authorization in Actor in Google Chrome on on Android prior ...)
+ TODO: check
+CVE-2026-106198 (Missing authorization in FileSystem in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106197 (Use after free in Browser in Google Chrome prior to 155.0.8059.39 allo ...)
+ TODO: check
+CVE-2026-106196 (Missing authorization in Navigation in Google Chrome on on iOS prior t ...)
+ TODO: check
+CVE-2026-106195 (Incorrect authorization in Chromoting in Google Chrome on on Mac prior ...)
+ TODO: check
+CVE-2026-106194 (Missing authorization in WebAppInstalls in Google Chrome prior to 155. ...)
+ TODO: check
+CVE-2026-106193 (Use after free in Parser in Google Chrome prior to 155.0.8059.39 allow ...)
+ TODO: check
+CVE-2026-106192 (Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106191 (Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106190 (Use after free in Media in Google Chrome prior to 155.0.8059.39 allowe ...)
+ TODO: check
+CVE-2026-106189 (Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0 ...)
+ TODO: check
+CVE-2026-106188 (Confused deputy in SignIn in Google Chrome on on Android prior to 155. ...)
+ TODO: check
+CVE-2026-106187 (Missing authorization in Permissions in Google Chrome prior to 155.0.8 ...)
+ TODO: check
+CVE-2026-106186 (Uncontrolled search path element in CredentialProvider in Google Chrom ...)
+ TODO: check
+CVE-2026-106185 (Improper input validation in Viz in Google Chrome prior to 155.0.8059. ...)
+ TODO: check
+CVE-2026-106184 (Uninitialized resource in Media in Google Chrome prior to 155.0.8059.3 ...)
+ TODO: check
+CVE-2026-106183 (Missing authorization in Chromoting in Google Chrome on on Windows pri ...)
+ TODO: check
+CVE-2026-106182 (UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 ...)
+ TODO: check
+CVE-2026-106181 (Incorrect reference resolution in DevTools in Google Chrome prior to 1 ...)
+ TODO: check
+CVE-2026-106180 (Observable discrepancy in Animation in Google Chrome prior to 155.0.80 ...)
+ TODO: check
+CVE-2026-106179 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0 ...)
+ TODO: check
+CVE-2026-106123 (The RabbitMQ Java client library allows Java and JVM-based application ...)
+ TODO: check
+CVE-2026-106122 (The RabbitMQ Java client library allows Java and JVM-based application ...)
+ TODO: check
+CVE-2026-106121 (The RabbitMQ Java client library allows Java and JVM-based application ...)
+ TODO: check
+CVE-2026-106120 (LiquidJS is a Shopify / GitHub Pages compatible template engine in pur ...)
+ TODO: check
+CVE-2026-106119 (LangChain is a framework for building LLM-powered applications. Prior ...)
+ TODO: check
+CVE-2026-106118 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIF ...)
+ TODO: check
+CVE-2026-106117 (ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding ...)
+ TODO: check
+CVE-2026-106116 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReade ...)
+ TODO: check
+CVE-2026-106115 (ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF ...)
+ TODO: check
+CVE-2026-106114 (ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ...)
+ TODO: check
+CVE-2026-106113 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding ...)
+ TODO: check
+CVE-2026-106112 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 ...)
+ TODO: check
+CVE-2026-106111 (ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDe ...)
+ TODO: check
+CVE-2026-106110 (ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF ...)
+ TODO: check
+CVE-2026-106109 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106107 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106106 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106105 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106104 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106103 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106102 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106101 (Quasar Framework is a framework for building high-performance Vue.js u ...)
+ TODO: check
+CVE-2026-106100 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-106041 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-106040 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-106039 (Mooncake Store master through 0.3.13.post1 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-106038 (Mooncake Store master through 0.3.13.post1 contains a missing authenti ...)
+ TODO: check
+CVE-2026-106037 (Mooncake through 0.3.13.post1 contains a missing authentication vulner ...)
+ TODO: check
+CVE-2026-106033 (A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ans ...)
+ TODO: check
+CVE-2026-106026 (tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability i ...)
+ TODO: check
+CVE-2026-106016 (Mitigation bypass in the File Handling component. This vulnerability w ...)
+ TODO: check
+CVE-2026-105985 (Craft CMS 5.10.13.2 contains an authenticated remote code execution vu ...)
+ TODO: check
+CVE-2026-105957 (A vulnerability was detected in SourceCodester Performance Indicator S ...)
+ TODO: check
+CVE-2026-105950 (A security vulnerability has been detected in getformwork formwork up ...)
+ TODO: check
+CVE-2026-105922 (A security flaw has been discovered in vllm-project vLLM up to 0.31.0. ...)
+ TODO: check
+CVE-2026-105921 (A vulnerability was identified in Kusalkasilva Learning-Management-Sys ...)
+ TODO: check
+CVE-2026-105920 (A vulnerability was determined in Kusalkasilva Learning-Management-Sys ...)
+ TODO: check
+CVE-2026-105919 (A vulnerability was found in Kusalkasilva Learning-Management-System u ...)
+ TODO: check
+CVE-2026-105918 (A vulnerability has been found in Kusalkasilva Learning-Management-Sys ...)
+ TODO: check
+CVE-2026-105879 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-105868 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105867 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105866 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105865 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105864 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105863 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105862 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105861 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105860 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105859 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105858 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105857 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105856 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105855 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105854 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105853 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105852 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105851 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105850 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105849 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105848 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105847 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105846 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105845 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105844 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105842 (lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerabilit ...)
+ TODO: check
+CVE-2026-105841 (lrzsz before 0.13.0 contains an OS command injection vulnerability in ...)
+ TODO: check
+CVE-2026-105840 (lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz ...)
+ TODO: check
+CVE-2026-105839 (libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer ...)
+ TODO: check
+CVE-2026-105838 (libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerabili ...)
+ TODO: check
+CVE-2026-105837 (libmikmod before 3.3.14 contains an integer overflow vulnerability in ...)
+ TODO: check
+CVE-2026-105836 (QloApps through 1.7.0 contains an authorization bypass vulnerability i ...)
+ TODO: check
+CVE-2026-105835 (PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitt ...)
+ TODO: check
+CVE-2026-105834 (Rundeck before 6.2.0 contains a path traversal vulnerability that allo ...)
+ TODO: check
+CVE-2026-105809 (A vulnerability was identified in SourceCodester Simple Student Inform ...)
+ TODO: check
+CVE-2026-105808 (A vulnerability was determined in SourceCodester Simple Student Inform ...)
+ TODO: check
+CVE-2026-105807 (A vulnerability was found in SourceCodester Simple Student Information ...)
+ TODO: check
+CVE-2026-105806 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105805 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105804 (Payload is a free and open source headless content management system. ...)
+ TODO: check
+CVE-2026-105801 (openapi-python-client generates Python clients from OpenAPI documents. ...)
+ TODO: check
+CVE-2026-105800 (i18next-http-backend is a backend layer for i18next that loads transla ...)
+ TODO: check
+CVE-2026-105799 (LangChain is a framework for building LLM-powered applications. Prior ...)
+ TODO: check
+CVE-2026-105798 (SimpleChat is a secure AI conversation application with personal and g ...)
+ TODO: check
+CVE-2026-105797 (SimpleChat is a secure AI conversation application with personal and g ...)
+ TODO: check
+CVE-2026-105796 (Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until ...)
+ TODO: check
+CVE-2026-105795 (Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 unti ...)
+ TODO: check
+CVE-2026-105794 (MsQuic is a cross-platform C implementation of the IETF QUIC protocol ...)
+ TODO: check
+CVE-2026-105793 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105792 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105791 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105790 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105789 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105788 (Microsoft UFO is an open-source framework for intelligent automation a ...)
+ TODO: check
+CVE-2026-105488 (Missing authorization in the global vault in Devolutions Server 2026.3 ...)
+ TODO: check
+CVE-2026-105485 (Authentication bypass OAuth device authorization flow in Devolutions S ...)
+ TODO: check
+CVE-2026-105317 (Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 version ...)
+ TODO: check
+CVE-2026-105305 (A flaw was found in the OIDC implementation of Keycloak, specifically ...)
+ TODO: check
+CVE-2026-105071 (Unauthenticated Sensitive Data Exposure in SiteVault \u2013 Backup, Re ...)
+ TODO: check
+CVE-2026-105070 (Unauthenticated Privilege Escalation in Salon booking system <= 10.31. ...)
+ TODO: check
+CVE-2026-105061 (Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 v ...)
+ TODO: check
+CVE-2026-105059 (Subscriber Broken Access Control in Delete All Comments of wordpress < ...)
+ TODO: check
+CVE-2026-105058 (Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.)
+ TODO: check
+CVE-2026-105057 (Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.)
+ TODO: check
+CVE-2026-104945 (TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerabi ...)
+ TODO: check
+CVE-2026-104944 (TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer disp ...)
+ TODO: check
+CVE-2026-104850 (MCP TypeScript SDK is the official TypeScript SDK for Model Context Pr ...)
+ TODO: check
+CVE-2026-104814 (Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 vers ...)
+ TODO: check
+CVE-2026-104757 (Editor Privilege Escalation in Import and export users and customers < ...)
+ TODO: check
+CVE-2026-104747 (Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.)
+ TODO: check
+CVE-2026-104672 (Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 version ...)
+ TODO: check
+CVE-2026-104670 (Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 vers ...)
+ TODO: check
+CVE-2026-104406 (Unauthenticated Broken Access Control in picu <= 3.10.1 versions.)
+ TODO: check
+CVE-2026-104405 (Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.)
+ TODO: check
+CVE-2026-104399 (Insertion of Sensitive Information Into Sent Data vulnerability in Sty ...)
+ TODO: check
+CVE-2026-104395 (Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.)
+ TODO: check
+CVE-2026-104394 (Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 v ...)
+ TODO: check
+CVE-2026-104387 (Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.1 ...)
+ TODO: check
+CVE-2026-104385 (Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 version ...)
+ TODO: check
+CVE-2026-104073 (NetBox versions 2.9.5 before 4.7.0 contain a server-side template inje ...)
+ TODO: check
+CVE-2026-104070 (The Crayons plugin for SPIP before 3.5.0 contains a missing authorizat ...)
+ TODO: check
+CVE-2026-104069 (HortusFox before 6.2 contains a remote code execution vulnerability in ...)
+ TODO: check
+CVE-2026-103831 (CVE-2026-103831: Insecure deserialization vulnerability in the Psr16Ca ...)
+ TODO: check
+CVE-2026-103778 (Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a U ...)
+ TODO: check
+CVE-2026-103620 (A missing authorization vulnerability was identified in GitHub Enterpr ...)
+ TODO: check
+CVE-2026-103346 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-102915 (Subscriber Broken Access Control in WPO365 <= 44.1 versions.)
+ TODO: check
+CVE-2026-102387 (Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 v ...)
+ TODO: check
+CVE-2026-102322 (Incorrect Authorization in SiteIsolation in Google Chrome prior to 155 ...)
+ TODO: check
+CVE-2026-101207 (Dell OpenManage Integration with Microsoft Windows Admin Center, versi ...)
+ TODO: check
+CVE-2026-100518 (Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= ...)
+ TODO: check
+CVE-2026-0198 (In is_pd_allowed of gem_msg.c, there is a possible permission bypass d ...)
+ TODO: check
+CVE-2025-8352 (Allocation of resources without limits or throttling vulnerability in ...)
+ TODO: check
+CVE-2025-71384 (Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi ...)
+ TODO: check
+CVE-2025-71383 (Dbit WIFI4 N300 1.0.0 devices allow the management interface to be cra ...)
+ TODO: check
+CVE-2025-45871 (LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL i ...)
+ TODO: check
+CVE-2025-15591 (Cross-site Scripting (XSS) in the Forums feature of OpenText Content M ...)
+ TODO: check
+CVE-2026-77050 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, ...)
- python-django 3:5.2.18-1 (bug #1150176)
NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
NOTE: Fixed by: https://github.com/django/django/commit/02a69e3791e3df23d45ea4ea7e7fc489f0eef2be (5.2.18)
-CVE-2026-84429
+CVE-2026-84429 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, ...)
- python-django 3:5.2.18-1 (bug #1150176)
NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
NOTE: Fixed by: https://github.com/django/django/commit/6ecd66e09a383be004a78a3a738ea9727ff07b0e (5.2.18)
-CVE-2026-87890
+CVE-2026-87890 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, ...)
- python-django 3:5.2.18-1 (bug #1150176)
NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
NOTE: Fixed by: https://github.com/django/django/commit/dd0558d1617619e0d66163675ef02135d0f54e5f (5.2.18)
-CVE-2026-87975
+CVE-2026-87975 (An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, ...)
- python-django 3:5.2.18-1 (bug #1150176)
NOTE: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
NOTE: Fixed by: https://github.com/django/django/commit/ff27883ca055aa9ab23015b50674a5b10dfe5a41 (5.2.18)
-CVE-2026-98372 [xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()]
+CVE-2026-98372 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/d042487dc118e494db2e2c1382310255c90ff544 (7.3-rc4)
-CVE-2026-98371 [xfrm: iptfs: fix runt reassembly panic from short inner tot_len]
+CVE-2026-98371 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/dc33262be1fe43d0eb0b84fb58c6ed42e2f64a8c (7.3-rc4)
-CVE-2026-98361 [RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths]
+CVE-2026-98361 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/769001ce838d907ecaa95f1d0a4e8fc86f761f9f (7.3-rc4)
-CVE-2026-98356 [RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup]
+CVE-2026-98356 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/6c368f7baaea63c1c7c28c6df271511f2a1562c9 (7.3-rc4)
-CVE-2026-98350 [wifi: brcmfmac: cyw: pass PMKID to firmware if present]
+CVE-2026-98350 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/e2de8d5eb2984416affdd9559e55f37c7f1bbf47 (7.3-rc4)
-CVE-2026-98324 [dmaengine: pxa: fix double counting of the hw descriptors]
+CVE-2026-98324 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/f6504be006aa4bb4bd26285f410a885c17920d65 (7.3-rc4)
-CVE-2026-98315 [ntfs: protect runlist updates with the runlist lock]
+CVE-2026-98315 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/91709ba5d6d709b2b663287b7e871e2c6b480502 (7.3-rc4)
-CVE-2026-98310 [drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory]
+CVE-2026-98310 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/985862be16c7e4da808c51f393d631fb60c0be5c (7.3-rc4)
-CVE-2026-98305 [net: dsa: mxl862xx: disable the stats poll on teardown]
+CVE-2026-98305 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/9e92ad4630f5dd1838ce6bbe6b1bd2c73d34de36 (7.3-rc4)
-CVE-2026-98281 [futex: Also allocate private hash on vfork()]
+CVE-2026-98281 (In the Linux kernel, the following vulnerability has been resolved: f ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/b61b6f95d6722ddbbbd09e689fa41b55fd36f9a5 (7.3-rc4)
-CVE-2026-98280 [drm/xe/i2c: Disable IRQ on unbind]
+CVE-2026-98280 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/f0e9f963a3d209d7dc7ddd61116118ab5da2797d (7.3-rc4)
-CVE-2026-98278 [net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check]
+CVE-2026-98278 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/150dba2c69e93302af24a0c868eebe4871e2e107 (7.3-rc4)
-CVE-2026-98274 [net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()]
+CVE-2026-98274 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/a41f24c612c3f5139a3143307eb85bbcf1bd4d07 (7.3-rc4)
-CVE-2026-98268 [perf: Fix null pointer access in is_include_guest_event()]
+CVE-2026-98268 (In the Linux kernel, the following vulnerability has been resolved: p ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/88aed0422f39b22406f35f1e758cea25e7bbcfb5 (7.3-rc4)
-CVE-2026-98259 [fs/dax: check zero or empty entry before converting xarray entry]
+CVE-2026-98259 (In the Linux kernel, the following vulnerability has been resolved: f ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/8e2b8614039853e68d5338e37821e8bcee9fc05f (7.3-rc4)
-CVE-2026-98258 [posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list]
+CVE-2026-98258 (In the Linux kernel, the following vulnerability has been resolved: p ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/c21eaa72f02fc6e85621cbe09d303d8fb8bd39cd (7.3-rc4)
-CVE-2026-98256 [signal: Prevent exec() race]
+CVE-2026-98256 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/d2710c8d938ae6a825a6463158e6e6f31eac792a (7.3-rc4)
-CVE-2026-98250 [nfsd: fix handling of NFSEXP_PNFS in the netlink codepath]
+CVE-2026-98250 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/f76017a7663c4ce5e379f8a8d39f032bdb1fd865 (7.3-rc4)
-CVE-2026-98244 [btrfs: clear free space tree creation state on rebuild failure]
+CVE-2026-98244 (In the Linux kernel, the following vulnerability has been resolved: b ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/3565893cc72cdf6b795cf6a33e7ff9605322334d (7.3-rc4)
-CVE-2026-98243 [dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3]
+CVE-2026-98243 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/3ed11c671ff7ec58c8fd96410233c677df23f407 (7.3-rc4)
-CVE-2026-98242 [dma-buf: Fix silent overflow for phys vec to sgt]
+CVE-2026-98242 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/b344ca94e8cc85796f16ea25e2e5a8e0303fe813 (7.3-rc4)
-CVE-2026-98240 [net: ip_tunnel: initialize `options_len` before referencing options]
+CVE-2026-98240 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/455ebeadf714f51e1dbbd6a022c74c9215b1cd76 (7.3-rc4)
-CVE-2026-98226 [mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count]
+CVE-2026-98226 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/12e9ac7bc5b254048f886bf421e3a15491106c1f (7.3-rc4)
-CVE-2026-98225 [mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem]
+CVE-2026-98225 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/932cfb25e7ce98d1f93895671ec186a3087e4f80 (7.3-rc4)
-CVE-2026-98224 [mm/vma: correctly unaccount on mmap_prepare() failure]
+CVE-2026-98224 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/6cc27d82196385fe06853319f74312a7d8019726 (7.3-rc4)
-CVE-2026-98223 [mm: filemap: retain mapped dropbehind folios]
+CVE-2026-98223 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/848d2ce2fce15fbdc083fbf9691bfa72911033c4 (7.3-rc4)
-CVE-2026-98220 [sched_ext: Fix NULL sched deref in kfunc sub-sched error paths]
+CVE-2026-98220 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/0a85182723b65ad8bee8131bc38fcf0347d6679b (7.3-rc4)
-CVE-2026-98219 [sched_ext: Close the pre-enable ops error claim window]
+CVE-2026-98219 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/c7a1c6e8004ab12a9c9bfdcb603f60f9bf4a3cee (7.3-rc4)
-CVE-2026-98183 [wifi: mac80211: avoid out-of-bounds read for empty PREQ elements]
+CVE-2026-98183 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/e6031f02269c0f51cf67886d177f02bc300b47cd (7.3-rc4)
-CVE-2026-98178 [drm/amdgpu: Skip KFD mapping clear before initialization]
+CVE-2026-98178 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/7f9caa70aef0950e06d395ca0035831214d88187 (7.3-rc4)
-CVE-2026-98166 [drm/ttm: fix swapped-out resources never leaving their bulk_move range]
+CVE-2026-98166 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/3db7d7d583419f7b1f2e141e36418802dbb25cf8 (7.3-rc4)
-CVE-2026-98165 [drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only]
+CVE-2026-98165 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/bd1f08246b8a2564d8ac61df715b6bcd5f994729 (7.3-rc2)
-CVE-2026-98370 [xfrm: fix compat ALLOCSPI request use-after-free]
+CVE-2026-98370 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d1ebd9081879fd9ae9c8fb7e8928f19cc88ae320 (7.3-rc4)
-CVE-2026-98369 [xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()]
+CVE-2026-98369 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d2f5082f9e84653fa1a9e8aebaaff23e688f5e19 (7.3-rc4)
-CVE-2026-98368 [esp: downgrade zerocopy managed frags before mutating skb frags]
+CVE-2026-98368 (In the Linux kernel, the following vulnerability has been resolved: e ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f89416eb3db151170a6f3c6dfc5239d26cdce4d2 (7.3-rc4)
-CVE-2026-98367 [RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept]
+CVE-2026-98367 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/32cd87f54dd1070020e664ccb0312a9f0fea79b4 (7.3-rc4)
-CVE-2026-98366 [RDMA/rxe: validate access flags before swapping the MR's PD]
+CVE-2026-98366 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/ae36a5b609ae79f4de966328b78d2584be9719a4 (7.3-rc4)
-CVE-2026-98365 [RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access]
+CVE-2026-98365 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d10e2a08799e858d3e71ea4169bcd018f216d444 (7.3-rc4)
-CVE-2026-98364 [xfrm: hold net_device reference under RCU in bundle creation]
+CVE-2026-98364 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1 (7.3-rc4)
-CVE-2026-98363 [firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS]
+CVE-2026-98363 (In the Linux kernel, the following vulnerability has been resolved: f ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/32471d84a487c7fd74532bc96be56f8028cf4a3f (7.3-rc4)
-CVE-2026-98362 [clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate]
+CVE-2026-98362 (In the Linux kernel, the following vulnerability has been resolved: c ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/70f4b78d560e592cbf3325b162424737d032fc1d (7.3-rc4)
-CVE-2026-98360 [RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds]
+CVE-2026-98360 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1caceeb2d74bbe88223aea55eb8626b4c5f076fd (7.3-rc4)
-CVE-2026-98359 [RDMA/core: Reject unregistering netdevs in ib_get_eth_speed]
+CVE-2026-98359 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ef9fbe1b93f3b617b96e86d5cd76b3fa44514cb5 (7.3-rc4)
-CVE-2026-98358 [IB/iser: reject a remote invalidation of an unregistered direction]
+CVE-2026-98358 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d85f0f0a7c85756fc992c70d869706f19dac9259 (7.3-rc4)
-CVE-2026-98357 [IB/isert: wait for deferred control PDU completions before releasing the connection]
+CVE-2026-98357 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/a8fe3dfce8c0d8a76dc3d8486a5bff5feebe156f (7.3-rc4)
-CVE-2026-98355 [RDMA/rtrs: guard against null kobj name]
+CVE-2026-98355 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/99c24a8968ebef0573825b5cb89d5985d51635b9 (7.3-rc4)
-CVE-2026-98354 [RDMA/mad: Fix receive buffer leak when PKey enforcement fails]
+CVE-2026-98354 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/3476c28c9addfa253f505e6bd87f1f5598b961d0 (7.3-rc4)
-CVE-2026-98353 [RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables]
+CVE-2026-98353 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/00baeade709fb66da647e8327e8398bb532e30f7 (7.3-rc4)
-CVE-2026-98352 [RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted]
+CVE-2026-98352 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/2ae16aaa78b5edc6e6d0904c84fd9cdfb762bcda (7.3-rc4)
-CVE-2026-98351 [wifi: virt_wifi: free skb when disconnected]
+CVE-2026-98351 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e (7.3-rc4)
-CVE-2026-98349 [wifi: libipw: reject too-short beacon and probe responses]
+CVE-2026-98349 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/5ce5721e8cbe3e80db8f43851cc2a2a92485ef4b (7.3-rc4)
-CVE-2026-98348 [wifi: libipw: reject too-short association responses]
+CVE-2026-98348 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/adb7118b7d2cfd7e8213c17d7d2829f353017754 (7.3-rc4)
-CVE-2026-98347 [IB/IPoIB: Avoid restoring OPER_UP after multicast flush]
+CVE-2026-98347 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9a141d3dc869d18b2eab35e999f4790a9b84e40f (7.3-rc4)
-CVE-2026-98346 [wifi: cfg80211: don't get the radio mask for netdev-less wdevs]
+CVE-2026-98346 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/a7783e585360ee05dfe21d3173dbbe985c94f29e (7.3-rc4)
-CVE-2026-98345 [wifi: cfg80211: check IP header size in cfg80211_classify8021d()]
+CVE-2026-98345 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/48b2c5c628b09cf36cbeca53e0432fc2a7518be7 (7.3-rc4)
-CVE-2026-98344 [dmaengine: Fix device kref underflow in dma_chan_put()]
+CVE-2026-98344 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/44dab659064eb5c10adb0306510eebe848ed592d (7.3-rc4)
-CVE-2026-98343 [dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()]
+CVE-2026-98343 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e873c74132f0c5f1452816cd9bb26208f0bba1e1 (7.3-rc4)
-CVE-2026-98342 [dmaengine: wait for RCU readers before releasing dma_device]
+CVE-2026-98342 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/dc750422170a563c7a81f6e49d36bb02c62ae37f (7.3-rc4)
-CVE-2026-98341 [wifi: cfg80211: don't free driver-owned scan requests]
+CVE-2026-98341 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/dab68a74e90b8e07f08ed9deaa5884857a3cfe89 (7.3-rc4)
-CVE-2026-98340 [wifi: cfg80211: only group hidden BSSes with beacon entries]
+CVE-2026-98340 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/068843ed0902c552a13860c5ec6b2ca65b57a065 (7.3-rc4)
-CVE-2026-98339 [wifi: cfg80211: don't filter by BSS type when removing stale entries]
+CVE-2026-98339 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/b377e1000d963e7182a987082b4b06580bd7ac84 (7.3-rc4)
-CVE-2026-98338 [wifi: cfg80211: ibss: ref BSS entry for joined event]
+CVE-2026-98338 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/708f9d43d6a2eb9c6b83fe62af628de9dffd9314 (7.3-rc4)
-CVE-2026-98337 [wifi: mac80211: don't start a ROC while scanning]
+CVE-2026-98337 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/733f0fde95392ed5f61a4e36aee661ea8d0e8581 (7.3-rc4)
-CVE-2026-98336 [wifi: mac80211: don't offload TC setup on AP_VLAN interfaces]
+CVE-2026-98336 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/362bd5bce29ed0f6fd3d39a7065567777d70606e (7.3-rc4)
-CVE-2026-98335 [wifi: mac80211: abort chanswitch when leaving a mesh]
+CVE-2026-98335 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ac7472a24bd433b81c06582835dd1d5547c10da9 (7.3-rc4)
-CVE-2026-98334 [wifi: mac80211: reset state when starting AP fails]
+CVE-2026-98334 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/3f28551d0241254a75626d868041c6340285088b (7.3-rc4)
-CVE-2026-98333 [wifi: mac80211: reset the LED state when ifup fails]
+CVE-2026-98333 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/78183e8331958fda11cd2b6850bb424a9747c4b2 (7.3-rc4)
-CVE-2026-98332 [wifi: mac80211: only operate on TDLS peers in the TDLS code]
+CVE-2026-98332 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/6f0a100df8539ce90f37c14e1945f396ca2410bc (7.3-rc4)
-CVE-2026-98331 [wifi: mac80211: unlist vifs when their netdev is unregistered]
+CVE-2026-98331 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/eee2efd82867b623982ac51925b5a1812a74c50d (7.3-rc4)
-CVE-2026-98330 [wifi: cfg80211: get the wiphy out of a dying network namespace]
+CVE-2026-98330 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/4635b1a1c1d693178a537446a6e09963f0fdae52 (7.3-rc4)
-CVE-2026-98329 [wifi: mac80211: don't allow injecting frames wider than the chanctx]
+CVE-2026-98329 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e14bf37bb2b3853012ff160131d1c6233f7a9cc9 (7.3-rc4)
-CVE-2026-98328 [wifi: mac80211: add HE 6 GHz capability in the scan elems len]
+CVE-2026-98328 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/cd54bf333f5631d3630bab0a832e9ae648f73515 (7.3-rc4)
-CVE-2026-98327 [wifi: mac80211: mesh: reset the CSA state when leaving]
+CVE-2026-98327 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/860134b3af77970e006feab7e5decb8c84771c7f (7.3-rc4)
-CVE-2026-98326 [wifi: mac80211: mesh: release the channel if start fails]
+CVE-2026-98326 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ae97fff6495a8764bc0ef281cfe5444f701e527f (7.3-rc4)
-CVE-2026-98325 [wifi: mac80211: set up the TX info early to fix failure paths]
+CVE-2026-98325 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/50d3d79dc0743b616afb00d01a626c76758721f7 (7.3-rc4)
-CVE-2026-98323 [RDMA/siw: Bound fragmented header copies by the remaining length]
+CVE-2026-98323 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9ff797e516dbc1ecb73701ec4c24055712d44411 (7.3-rc4)
-CVE-2026-98322 [netfilter: nft_nat: fully initialise new_addr in netmap setup]
+CVE-2026-98322 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d313499df66159b4b7971d760d16729598ab7e5a (7.3-rc4)
-CVE-2026-98321 [netfilter: nf_nat: unregister and release hooks on error]
+CVE-2026-98321 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/cbdd39ce42530a193c56beb206a3356cb6d01016 (7.3-rc4)
-CVE-2026-98320 [netfilter: flowtable: hold reference on ct until flow is released]
+CVE-2026-98320 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e75a9fa1d44bcbd66ea02e8781bcca6ea4076e0d (7.3-rc4)
-CVE-2026-98319 [drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr]
+CVE-2026-98319 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9eb1a393c89a79c4210230d23e7d88d239c61d7b (7.3-rc4)
-CVE-2026-98318 [smb: client: validate absolute native symlink targets before NT fixups]
+CVE-2026-98318 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/23c240d9509e15f72e4112fc95f0160ab32ec430 (7.3-rc4)
-CVE-2026-98317 [neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.]
+CVE-2026-98317 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/6d79b223ec44ada58ad37db42f539b60985a7722 (7.3-rc4)
-CVE-2026-98316 [ALSA: bcd2000: Fix race between rawmidi and disconnect]
+CVE-2026-98316 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/221253723dc58bb901c3f27a7659823e63fc598c (7.3-rc4)
-CVE-2026-98314 [ALSA: pcm: set timer->private_data before registering the PCM timer]
+CVE-2026-98314 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1e713f9bb2ac583521f06b0eb4e22440b1e3d078 (7.3-rc4)
-CVE-2026-98313 [drm/msm/dp: skip PUSH_IDLE when the link was never enabled]
+CVE-2026-98313 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e249a6e2a130c08bb4d8b0a55cbe29754307e5c9 (7.3-rc4)
-CVE-2026-98312 [ALSA: 6fire: fix OOB write from device-reported iso length]
+CVE-2026-98312 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1589afe2d099d3e817873bc474676968d7080410 (7.3-rc4)
-CVE-2026-98311 [wifi: virt_wifi: don't transfer operstate before register]
+CVE-2026-98311 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e5c8d7acd31b27057ea42cd405d0b3ece097bc89 (7.3-rc4)
-CVE-2026-98309 [drm/vc4: Use managed KMS polling to fix UAF on unbind]
+CVE-2026-98309 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/073a30d75f309812ed61af134f24ffef4107b13a (7.3-rc4)
-CVE-2026-98308 [ALSA: hda: trace PCM open only after assigning a stream]
+CVE-2026-98308 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c9e6e5f38bf75276605f1952b22285f5f3abcaff (7.3-rc4)
-CVE-2026-98307 [wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()]
+CVE-2026-98307 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/820b8cff81c796ba20573e04722ab62500713f97 (7.3-rc4)
-CVE-2026-98306 [seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation]
+CVE-2026-98306 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/7616242a2b37883f7322aaa1d2bd6cd0fed28315 (7.3-rc4)
-CVE-2026-98304 [net: bcmgenet: restore the hardware filters on open]
+CVE-2026-98304 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/23ca4ddc4fce2c233a49e9fd34d4b5b02bd7324e (7.3-rc4)
-CVE-2026-98303 [ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup]
+CVE-2026-98303 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/2998147b59c9df0a51477c7a6b3d1f0ba3127dd4 (7.3-rc4)
-CVE-2026-98302 [net: fddi: skfp: fix NULL deref when setting the MAC address while down]
+CVE-2026-98302 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/7c8810c2e69c3d9ca6df870b40ae9218e50b4fb1 (7.3-rc4)
-CVE-2026-98301 [net: bridge: mst: move switchdev call outside rcu]
+CVE-2026-98301 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/18a6fe05fb6e18de29fa90d388bb34044114b3d8 (7.3-rc4)
-CVE-2026-98300 [tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().]
+CVE-2026-98300 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8e759cd1f6444a946bd1fd2b2b29eea582eea1d5 (7.3-rc4)
-CVE-2026-98299 [tcp: do not let tcp_rmem be set below 4096]
+CVE-2026-98299 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/83a945a529d6e002dd7339c532288a931f463dba (7.3-rc4)
-CVE-2026-98298 [dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()]
+CVE-2026-98298 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/075bc7b1d3dde5ed43fbaabbc1a69f09b7fc3a47 (7.3-rc4)
-CVE-2026-98297 [Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained]
+CVE-2026-98297 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/6610c6fe4b8936c232048e6049bf77c70a6f759c (7.3-rc4)
-CVE-2026-98296 [Bluetooth: btintel_pcie: validate TX skb length in send_sync]
+CVE-2026-98296 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/4b837ebd0ea21ae5cc26f02dc042edc6fe7b46b9 (7.3-rc4)
-CVE-2026-98295 [Bluetooth: coredump: Quiesce dump work on unregister]
+CVE-2026-98295 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d236517c264e41dc09833c708ef23bccb7a91219 (7.3-rc4)
-CVE-2026-98294 [Bluetooth: hci_qca: Do not write to the serial port after it is closed]
+CVE-2026-98294 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/4e93c65f87825e1e012bce56615320aeb123815d (7.3-rc4)
-CVE-2026-98293 [Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()]
+CVE-2026-98293 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/ca18ee413a7cb6f09885778039225e58bae0d607 (7.3-rc4)
-CVE-2026-98292 [Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access]
+CVE-2026-98292 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8879e3e0a84a86954c855caceead4867e74a9a27 (7.3-rc4)
-CVE-2026-98291 [Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit]
+CVE-2026-98291 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 (7.3-rc4)
-CVE-2026-98290 [Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup]
+CVE-2026-98290 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/801fb950cae7048eb7d83b18857d1ca37b8cd5a4 (7.3-rc4)
-CVE-2026-98289 [af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().]
+CVE-2026-98289 (In the Linux kernel, the following vulnerability has been resolved: a ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/4a4263dfeabad72f95e8ab6e15146861fa4144dd (7.3-rc4)
-CVE-2026-98288 [net: stmmac: fix TSO header length truncation]
+CVE-2026-98288 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/15989abd74f16f44bf953d056b95f1d2fda9b0cd (7.3-rc4)
-CVE-2026-98287 [pppoatm: ensure a writable skb header and linear data]
+CVE-2026-98287 (In the Linux kernel, the following vulnerability has been resolved: p ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ecc7253683a3c55caa868ce0ee530fcb0044bd3c (7.3-rc4)
-CVE-2026-98286 [drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown]
+CVE-2026-98286 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c391a40f71886b28c082b47270f0e856fa3e1150 (7.3-rc4)
-CVE-2026-98285 [net: bridge: vlan: fix bugs caused by switchdev deletion errors]
+CVE-2026-98285 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/2842ce397dd09882530b42f7fdb0c855767eb24e (7.3-rc4)
-CVE-2026-98284 [netlink: do not free nlk->groups while lockless readers can use it]
+CVE-2026-98284 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ceac0de741bfb47ca255eee075257b3bb31f0651 (7.3-rc4)
-CVE-2026-98283 [KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()]
+CVE-2026-98283 (In the Linux kernel, the following vulnerability has been resolved: K ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/51938dfa8a51a4f85328413fca9b6e21f9d2d088 (7.3-rc4)
-CVE-2026-98282 [powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba]
+CVE-2026-98282 (In the Linux kernel, the following vulnerability has been resolved: p ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/0b271f7d7f5ed45bc498a03ce0aa9cfd8402fc71 (7.3-rc4)
-CVE-2026-98279 [btrfs: handle lack of space when cleaning up verity items]
+CVE-2026-98279 (In the Linux kernel, the following vulnerability has been resolved: b ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/76bf149cd0298544631e756670b89c399c7acbca (7.3-rc4)
-CVE-2026-98277 [eth: fbnic: ring the doorbell if a burst ends in a drop]
+CVE-2026-98277 (In the Linux kernel, the following vulnerability has been resolved: e ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/490599ab23134962a6d18a024e84541d77bdb999 (7.3-rc4)
-CVE-2026-98276 [net: lock the socket in sock_gettstamp()]
+CVE-2026-98276 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9ed55f3dbef4f4adfe65eb03b0c35c53229a8490 (7.3-rc4)
-CVE-2026-98275 [net: ethernet: cortina: Ack RX overrun interrupt correctly]
+CVE-2026-98275 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e (7.3-rc4)
-CVE-2026-98273 [x86/kprobes: Fix crash when probing CS CALL instructions]
+CVE-2026-98273 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/a5f7a5bb3b7f28ba7e4fa246775b29a0e5537255 (7.3-rc4)
-CVE-2026-98272 [net: mvpp2: prevent buffer overflow in page_pool allocation]
+CVE-2026-98272 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/14cb1e7702e5cb3c58888f6aed498381a73927d2 (7.3-rc4)
-CVE-2026-98271 [net: skbuff: do not leave stale header offsets after pskb_carve()]
+CVE-2026-98271 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/a5117e1eccac6ee3bd4aed7cacf8ebcb6b3eb309 (7.3-rc4)
-CVE-2026-98270 [drm/amdgpu: check ras and obj before dereference]
+CVE-2026-98270 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/723d4dc628d764b19cf9efca14b82cca5ff020c9 (7.3-rc4)
-CVE-2026-98269 [btrfs: abort transaction on failure to update inode for hole punching and reflinking]
+CVE-2026-98269 (In the Linux kernel, the following vulnerability has been resolved: b ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/97fcd34aa9fd73cefe3120ac9a82ca9d7763922f (7.3-rc4)
-CVE-2026-98267 [9p: Fix v9fs_issue_write() to update i_size and remote_i_size]
+CVE-2026-98267 (In the Linux kernel, the following vulnerability has been resolved: 9 ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/c60ae98c5aa64021751b38ab1313b19d620bf640 (7.3-rc4)
-CVE-2026-98266 [ALSA: core: Fix potential UAF after asynchronous card release]
+CVE-2026-98266 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/fd95e68df6fe66344161a1329cbe5e5805e7b704 (7.3-rc4)
-CVE-2026-98265 [ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity]
+CVE-2026-98265 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/76a986c980bb502c7688d605ac7a67fd257a9a1b (7.3-rc4)
-CVE-2026-98264 [ALSA: virtio: reset device before deleting virtqueues]
+CVE-2026-98264 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/6c05d00af307560e6a9f1631d6270d3df5aa2272 (7.3-rc4)
-CVE-2026-98263 [ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type]
+CVE-2026-98263 (In the Linux kernel, the following vulnerability has been resolved: A ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/03a5699a0a04309c597683967aaaf25d1e555ea2 (7.3-rc4)
-CVE-2026-98262 [ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY]
+CVE-2026-98262 (In the Linux kernel, the following vulnerability has been resolved: a ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/82e47533221d4746947b74d2e79a478c36c6433a (7.3-rc4)
-CVE-2026-98261 [cifs: Fix server use-after-free in cifs_chan_skip_or_disable()]
+CVE-2026-98261 (In the Linux kernel, the following vulnerability has been resolved: c ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/717e0a25036b6c92cecace30913b2d874a4c22b8 (7.3-rc4)
-CVE-2026-98260 [exec: Cleanup POSIX timers right after de_thread()]
+CVE-2026-98260 (In the Linux kernel, the following vulnerability has been resolved: e ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/acb03d3881818581052924a9bbbe92b8741ed448 (7.3-rc4)
-CVE-2026-98257 [rds: ib: use rds_conn_drop() on protocol version mismatch]
+CVE-2026-98257 (In the Linux kernel, the following vulnerability has been resolved: r ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f97d8c7bab7843631206a114986c9059da03efeb (7.3-rc4)
-CVE-2026-98255 [tcp: exclude old ACKs from tcp fast path]
+CVE-2026-98255 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f81e6c3fb06327bc49cdd6e559845293ba06a704 (7.3-rc4)
-CVE-2026-98254 [swiotlb: use the adjusted address for the highmem page lookup]
+CVE-2026-98254 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/b7d7914a9ae3097e63d113007e4fb44d33d515b1 (7.3-rc4)
-CVE-2026-98253 [RDMA/ucma: Serialize join and leave on copy_to_user failure]
+CVE-2026-98253 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/662ade4de9ff5eceb0820a9f8e9fac70ba6a815b (7.3-rc4)
-CVE-2026-98252 [RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()]
+CVE-2026-98252 (In the Linux kernel, the following vulnerability has been resolved: R ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/33fb59da49c4c3f5c2ec9f9d4447a56857a02c02 (7.3-rc4)
-CVE-2026-98251 [openvswitch: avoid reallocating confirmed conntrack labels]
+CVE-2026-98251 (In the Linux kernel, the following vulnerability has been resolved: o ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/3f118c8217c109fd13ca61caa301d72c483897ef (7.3-rc4)
-CVE-2026-98249 [arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc]
+CVE-2026-98249 (In the Linux kernel, the following vulnerability has been resolved: a ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/955d86e5f3b95b731991fdb84966c50b16314629 (7.3-rc4)
-CVE-2026-98248 [arm64: percpu: Fix LSE operations on {8,16}-bit types]
+CVE-2026-98248 (In the Linux kernel, the following vulnerability has been resolved: a ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8cf2093f5372952a9ebc805c418d45df7112cd14 (7.3-rc4)
-CVE-2026-98247 [Bluetooth: hci_codec: validate vendor codec count length]
+CVE-2026-98247 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d0795cfd6f655f4de84868a4f4bb41a03f037b3d (7.3-rc4)
-CVE-2026-98246 [Bluetooth: hci_sync: Serialize local codec list cleanup]
+CVE-2026-98246 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/9a10987a2f160a44a638c9a35994ca6e3089696e (7.3-rc4)
-CVE-2026-98245 [btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()]
+CVE-2026-98245 (In the Linux kernel, the following vulnerability has been resolved: b ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/0594e3423f4ba3137c734371169491f9a98e9af4 (7.3-rc4)
-CVE-2026-98241 [ipv6: xfrm: use full sockets in local error paths]
+CVE-2026-98241 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/6973a21ee73c5567f883813c8ef414774b45892f (7.3-rc4)
-CVE-2026-98239 [net: lan743x: fix RX checksum use-after-free]
+CVE-2026-98239 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/a9ce4053dc945c5372dedba5017ee675b30dc0c5 (7.3-rc4)
-CVE-2026-98238 [net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()]
+CVE-2026-98238 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c7ead9704249d57d4693a04697e3bbd285138fa9 (7.3-rc4)
-CVE-2026-98237 [net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain]
+CVE-2026-98237 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/5d063822ac5184939c1ed377a339a01d8ae814e8 (7.3-rc4)
-CVE-2026-98236 [net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value]
+CVE-2026-98236 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/31550d585589fde1ae95bf7f7a8188b2d2fdf1c7 (7.3-rc4)
-CVE-2026-98235 [net/sched: act_api: release tail references on DELACTION failure]
+CVE-2026-98235 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/6e05e46fa821a5c1b281355f1f622ac76cb6080a (7.3-rc4)
-CVE-2026-98234 [net/sched: hhf: cap hh_flows_limit at change time]
+CVE-2026-98234 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/2cef2588c995722a901368def30befeef9ae55c6 (7.3-rc4)
-CVE-2026-98233 [net/packet: clear RX owner on VNET header error]
+CVE-2026-98233 (In the Linux kernel, the following vulnerability has been resolved: n ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/33ff111d7ba3beb86e28938d6382bb5beabd865a (7.3-rc4)
-CVE-2026-98232 [scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()]
+CVE-2026-98232 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/3d676e458fe0c566f5a62753dc696b6a862fc412 (7.3-rc4)
-CVE-2026-98231 [xfrm: serialize state GC with device state flush]
+CVE-2026-98231 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/89fefad9f971bc637fb22373078144f2563c4be9 (7.3-rc4)
-CVE-2026-98230 [xfrm: use hlist_del_init_rcu for state_cache and state_cache_input]
+CVE-2026-98230 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/2afb8dc1f4390f164db8352f8e685e126e9db566 (7.3-rc4)
-CVE-2026-98229 [xfrm: save input state data before secpath resets]
+CVE-2026-98229 (In the Linux kernel, the following vulnerability has been resolved: x ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/3cf5cdecd99c9c186a5ea518d93bbf3045b6e3aa (7.3-rc4)
-CVE-2026-98228 [mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ]
+CVE-2026-98228 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/bbc448c541ed90d52f9ec22f17394304e3bf170e (7.3-rc4)
-CVE-2026-98227 [memstick: ms_block: destroy io_queue workqueue on removal]
+CVE-2026-98227 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/90af7fde083e1b22c349c3a8b1626728e44e474c (7.3-rc4)
-CVE-2026-98222 [KEYS: encrypted: fix integer overflow of datablob_len]
+CVE-2026-98222 (In the Linux kernel, the following vulnerability has been resolved: K ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8697c431e297eb0d0ab13dda6bc172b48a34f05c (7.3-rc4)
-CVE-2026-98221 [KEYS: trusted: Fix tpm2_load_cmd() boundary check]
+CVE-2026-98221 (In the Linux kernel, the following vulnerability has been resolved: K ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/114f00d738f15dd8c7318369edcdc53dd6d08763 (7.3-rc4)
-CVE-2026-98218 [i2c: atr: fix dangling adapter pointer on add failure]
+CVE-2026-98218 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/ad34235808b63a70ca4989b7a2852923193d06ef (7.3-rc4)
-CVE-2026-98217 [IB/mlx4: Fix use-after-free on pkey sysfs registration failure]
+CVE-2026-98217 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1af874e9f4ce22ccf8b10ab5462f32c70d3be21a (7.3-rc4)
-CVE-2026-98216 [IB/hfi1: Fix the PIO_CRED credit-return mmap]
+CVE-2026-98216 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/62f0f34fbd2b2d5653d33d3b9d42fdcabb1c0101 (7.3-rc4)
-CVE-2026-98215 [selinux: preserve user SID across nested backing files]
+CVE-2026-98215 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/8c0c602202b9a4909b00bc3354e3c0355bc69e65 (7.3-rc4)
-CVE-2026-98214 [selinux: recheck intermediate backing files on mprotect()]
+CVE-2026-98214 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/78fc54b934bfb2c18aad8154c7302067146946f9 (7.3-rc4)
-CVE-2026-98213 [mmc: core: Cancel SDIO IRQ work before freeing host]
+CVE-2026-98213 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/6feadbecdae60a6324c967f3b1493741083793a3 (7.3-rc4)
-CVE-2026-98212 [mmc: hsq: Fix use-after-free in retry work]
+CVE-2026-98212 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/5d132990475f02cfa1debe03d50b479432864ebd (7.3-rc4)
-CVE-2026-98211 [mmc: mmci: Fix use-after-free in busy-timeout work]
+CVE-2026-98211 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/2b19cf3e50cddaff07b657dae1a8f30f06032852 (7.3-rc4)
-CVE-2026-98210 [mmc: mxcmmc: cancel data work and watchdog on remove]
+CVE-2026-98210 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d3a421c82412344022982d5b91ba23194a0a6f29 (7.3-rc4)
-CVE-2026-98209 [mmc: sdhci-of-aspeed: Remove children before releasing SDC resources]
+CVE-2026-98209 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/4396d70bb7fec531bcf934fed016b2f3300c670b (7.3-rc4)
-CVE-2026-98208 [mmc: sdio_uart: fix xmit_fifo leak when the port table is full]
+CVE-2026-98208 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/53823e25793a97d07e6e98e0904bbf74cac8bc76 (7.3-rc4)
-CVE-2026-98207 [mmc: spi: reset bytes_xfered before retrying CRC failures]
+CVE-2026-98207 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8b0cc8707f65e0f51912e764e1b309b2559db1ec (7.3-rc4)
-CVE-2026-98206 [Input: cyttsp5 - clamp the HID report size before memcpy]
+CVE-2026-98206 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/85f080fb87ed5cd3e46121be677f52c82f26a0ab (7.3-rc4)
-CVE-2026-98205 [Input: evdev - zero absinfo before partial copy in EVIOCSABS]
+CVE-2026-98205 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8b852965b8eaf910c314dc346967ed82c8d4f235 (7.3-rc4)
-CVE-2026-98204 [Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()]
+CVE-2026-98204 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/51cfe54f815ae175c7d1126b983d4d7c89715004 (7.3-rc4)
-CVE-2026-98203 [Input: soc_button_array - check btns_desc->package.count]
+CVE-2026-98203 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/fb5022278b6ea7f1838e3ef78028d5d5e3375f65 (7.3-rc4)
-CVE-2026-98202 [Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound]
+CVE-2026-98202 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/fe10579b6dc3f0dac61e51e1797cacbba5039ac2 (7.3-rc4)
-CVE-2026-98201 [Input: zero ff_effect before compat copy in input_ff_effect_from_user]
+CVE-2026-98201 (In the Linux kernel, the following vulnerability has been resolved: I ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f84819ef8d66931ee3998fee3c4f03230f4cb6cc (7.3-rc4)
-CVE-2026-98200 [hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()]
+CVE-2026-98200 (In the Linux kernel, the following vulnerability has been resolved: h ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/e6cb0b4d4ecb8e71fd2200d907ab2e9663356f69 (7.3-rc4)
-CVE-2026-98199 [hwmon: (pmbus/core) increase number of phases and add new mask]
+CVE-2026-98199 (In the Linux kernel, the following vulnerability has been resolved: h ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/06bd6794b5fd2163880ac3bfe973d4cc61f359f3 (7.3-rc4)
-CVE-2026-98198 [hwmon: (pwm-fan) Stop RPM timer before freeing tach data]
+CVE-2026-98198 (In the Linux kernel, the following vulnerability has been resolved: h ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/26d5ff79768548efb1e604bb6e8697c101e06269 (7.3-rc4)
-CVE-2026-98197 [hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove]
+CVE-2026-98197 (In the Linux kernel, the following vulnerability has been resolved: h ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/0ff9c7775e51ac6d47b1bb5c46f06b1434fe58a8 (7.3-rc4)
-CVE-2026-98196 [wifi: brcmsmac: fix UAF in brcms_free_timer()]
+CVE-2026-98196 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/1eeca1d5e0920fbdad6449768fd2d4364e714180 (7.3-rc4)
-CVE-2026-98195 [wifi: iwlegacy: fix broadcast stations deallocation]
+CVE-2026-98195 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/b5526b780f8b297a76030410b96ba29153afb98f (7.3-rc4)
-CVE-2026-98194 [wifi: libertas_tf: fix UAF in lbtf_free_adapter()]
+CVE-2026-98194 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/bbb9a0ab96d44a64529aafc7a16de460a1712f6a (7.3-rc4)
-CVE-2026-98193 [wifi: libipw: reject TKIP frames without a full MIC]
+CVE-2026-98193 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/06f42accaf3c6aecab1dcc57f68dde6c06c8b380 (7.3-rc4)
-CVE-2026-98192 [wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown]
+CVE-2026-98192 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d9be5e75530772fc31637070d51e5717d6aeaa2a (7.3-rc4)
-CVE-2026-98191 [wifi: wlcore: release runtime PM ref on regdomain config failure]
+CVE-2026-98191 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8a1f3cf89ddcc700e25afe42cfad333059adcc94 (7.3-rc4)
-CVE-2026-98190 [wifi: wilc1000: fix out-of-bounds read in P2P public action frames]
+CVE-2026-98190 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ba6cb7c0868a412c2eb68e8efd5aa38bfb258a14 (7.3-rc4)
-CVE-2026-98189 [wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()]
+CVE-2026-98189 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c1ba7f7f18465e259cf1b4d9c73fc73853d7f790 (7.3-rc4)
-CVE-2026-98188 [wifi: p54: validate curve data length in the calibration curve converters]
+CVE-2026-98188 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/ce858fa6b8a214dee5adb82358885fa024cdd887 (7.3-rc4)
-CVE-2026-98187 [wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST]
+CVE-2026-98187 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d8efd84f49379ed28624098821f80e992657d935 (7.3-rc4)
-CVE-2026-98186 [wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length]
+CVE-2026-98186 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e667aee1c192d67d27c803007bfa9c6e0873e959 (7.3-rc4)
-CVE-2026-98185 [wifi: mwifiex: validate scan response extents]
+CVE-2026-98185 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/3687d7d48070838cc2953431b3a27717cab0aaf6 (7.3-rc4)
-CVE-2026-98184 [wifi: mwifiex: prevent authentication frame length truncation]
+CVE-2026-98184 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/fa00193eb991f92b007aefe7afb6a7566976dacf (7.3-rc4)
-CVE-2026-98182 [wifi: mac80211: refuse to make a monitor active when it has no queue]
+CVE-2026-98182 (In the Linux kernel, the following vulnerability has been resolved: w ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/2b04d6556964ae9f89819b86a0a7801e39c3aae5 (7.3-rc4)
-CVE-2026-98181 [drm/gud: fix out-of-bounds write in gud_plane_atomic_check()]
+CVE-2026-98181 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/59ced288fcba9e91bd38e61a972ad782c4edb7d0 (7.3-rc4)
-CVE-2026-98180 [drm/msm: RCU-free the scheduler-containing ring and VM objects]
+CVE-2026-98180 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/01c8d1f385f788f1bbbbb7687c4386d614281218 (7.3-rc4)
-CVE-2026-98179 [drm/amdgpu: fix rmmio iounmap skipped on device removal]
+CVE-2026-98179 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/5155002b03b24ba3ef91c5c313b8cf0171b24904 (7.3-rc4)
-CVE-2026-98177 [drm/amdkfd: Avoid integer underflow in EOP ring size calculation.]
+CVE-2026-98177 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/8ee521b8b189799e361d4233c5180ba56656d4d4 (7.3-rc4)
-CVE-2026-98176 [drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc]
+CVE-2026-98176 (In the Linux kernel, the following vulnerability has been resolved: d ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c883d0a132d430ef7ebb23fd94323be94d0fbdb8 (7.3-rc4)
-CVE-2026-98175 [smb: client: cancel reconnect work in clean_demultiplex_info()]
+CVE-2026-98175 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/c65eae6f61d1778ff7a82e4aae4080e26f486af1 (7.3-rc4)
-CVE-2026-98174 [smb: client: fix rlist race and missing initialization]
+CVE-2026-98174 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/5f270f091256da1338c3631083e15d7f83cc05e1 (7.3-rc4)
-CVE-2026-98173 [smb: client: fix use-after-free of iface in cifs_try_adding_channels()]
+CVE-2026-98173 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/d034e836eefd7ce75e588f7031cffbeec594f5ac (7.3-rc4)
-CVE-2026-98172 [smb: client: fix smbd_connection leak on cifs_get_tcp_session() error]
+CVE-2026-98172 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/e75c96157d45e498970158c8f7373d90102e33b9 (7.3-rc4)
-CVE-2026-98171 [smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs]
+CVE-2026-98171 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/05762c5bc1cfdcac36747994fde2c04387a457f1 (7.3-rc4)
-CVE-2026-98170 [smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()]
+CVE-2026-98170 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/eeb5ef6083e1cefa2ef75041b5597ff228b8d7bb (7.3-rc4)
-CVE-2026-98169 [smb: client: fix potential OOB read in smb3_enum_snapshots()]
+CVE-2026-98169 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/4775c3b7a597907e0b97556c7986fda238a377ae (7.3-rc4)
-CVE-2026-98168 [smb: client: fix reparse buffer bounds in cifs_query_reparse_point()]
+CVE-2026-98168 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/5f0306e731e2f46e91419eae57eee3a241c055e0 (7.3-rc4)
-CVE-2026-98167 [smb: client: fix server->total_read for compound encrypted PDUs]
+CVE-2026-98167 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
NOTE: https://git.kernel.org/linus/f73726b83e4756fdaa099e1bc1143293bd57ad79 (7.3-rc4)
CVE-2026-97300 (Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 v ...)
@@ -825,7 +1907,7 @@ CVE-2026-39599 (Contributor Broken Access Control in WDS MCP Content Manager <=
NOT-FOR-US: WordPress plugin or theme
CVE-2026-32582 (Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-32576 (Customer Insecure Direct Object References (IDOR) in Faktur Pro for Wo ...)
+CVE-2026-32576 (Authorization Bypass Through User-Controlled Key vulnerability in ZWEI ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-25302 (Cryptographic Issue when processing non-ELF partitions, authentication ...)
NOT-FOR-US: Qualcomm
@@ -845,7 +1927,7 @@ CVE-2026-25267 (Memory corruption when non-secure loader rewrites page tables be
NOT-FOR-US: Qualcomm
CVE-2026-25263 (Memory corruption while processing IOCTL command called from user spac ...)
NOT-FOR-US: Qualcomm
-CVE-2026-21589 (h3. Summary This is a vulnerability in Bitbucket Data Center, Conflue ...)
+CVE-2026-21589 (This is a vulnerability in Bitbucket Data Center, Confluence Data Cent ...)
NOT-FOR-US: Atlassian
CVE-2026-105786 (Joplin is an open source note-taking and to-do application that organi ...)
- joplin <itp> (bug #931306)
@@ -35199,7 +36281,7 @@ CVE-2026-81786 (Unauthenticated Broken Access Control in Thank You Page Customiz
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81785 (Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-81784 (Unauthenticated PHP Object Injection in Wise Chat <= 3.4 versions.)
+CVE-2026-81784 (Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wi ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81783 (Subscriber Broken Authentication in MailMunch \u2013 Grow your Email L ...)
NOT-FOR-US: WordPress plugin or theme
@@ -63176,9 +64258,9 @@ CVE-2026-66638 (Contributor Cross Site Scripting (XSS) in Frontend Admin by Dyna
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66637 (Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66636 (Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions.)
+CVE-2026-66636 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66635 (Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web < ...)
+CVE-2026-66635 (Cross-Site Request Forgery (CSRF) vulnerability in 10Web Slider by 10W ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66634 (Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= ...)
NOT-FOR-US: WordPress plugin or theme
@@ -64512,7 +65594,7 @@ CVE-2026-XXXX [divide-by-zero on zero glyph width causes crash]
- antiword 0.37-18 (bug #1144640; unimportant)
NOTE: Crash in CLI tool, no security impact
CVE-2026-63347
- {DSA-6475-1}
+ {DSA-6475-1 DLA-4825-1}
- suricata-update 1.3.8-1
NOTE: https://github.com/OISF/suricata-update/security/advisories/GHSA-6v4p-4w5x-9fp2
NOTE: https://redmine.openinfosecfoundation.org/issues/8633
@@ -107408,7 +108490,7 @@ CVE-2026-59871 (node-tar is a tar archive manipulation library for Node.js. Prio
[bullseye] - node-tar <postponed> (Minor issue)
NOTE: https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp
NOTE: Fixed by: https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b (v7.5.18)
-CVE-2026-59870 (js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2. ...)
+CVE-2026-59870 (js-yaml is a JavaScript YAML parser and dumper. Prior to 3.15.1, 4.3.1 ...)
- node-js-yaml <not-affected> (Vulnerable code not present)
NOTE: https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm
NOTE: Fixed by: https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe (5.2.1)
@@ -117014,7 +118096,7 @@ CVE-2026-56042 (Customer Cross Site Scripting (XSS) in Advanced Order Export For
NOT-FOR-US: WordPress plugin or theme
CVE-2026-56023 (Customer Broken Access Control in UPI QR Code Payment Gateway for WooC ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-56014 (Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 ...)
+CVE-2026-56014 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-56013 (Unauthenticated Insecure Direct Object References (IDOR) in License Ma ...)
NOT-FOR-US: WordPress plugin or theme
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40aed0b14f8b0dde4e4ca02f6151077c15b5c241
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40aed0b14f8b0dde4e4ca02f6151077c15b5c241
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/ea22a98f/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list