Browse CVEs

HIGH 7.1 CVE-2026-53396 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_fi… Linux Kernel 7.1.3+ Fix from $1,9502026-07-19 HIGH 7.5 CVE-2026-53397 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_setaclargs()… Linux Kernel 5.10.260 / 5.15.211+ Fix from $1,9502026-07-19 MEDIUM 5.5 CVE-2026-53378 In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The coloro… Linux Kernel 7.0.9+ Fix from $1,6002026-07-19 HIGH 7.5 CVE-2026-61863 ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-15 HIGH 7.5 CVE-2026-61866 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory le… Imagemagick 7.1.2-26+ Fix from $1,9502026-07-15 HIGH 7.5 CVE-2026-47482 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A s… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-44806 Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. Windows 10 1607 10.0.14393.9339 / 10.0.17763.9020+ Fix from $1,9502026-07-14 HIGH 7.5 CVE-2024-7708 For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Cont… Jetty 10.0.23 / 11.0.23+ Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-53364 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_termi… Linux Kernel 6.18.35 / 7.0.12+ Fix from $1,6002026-07-13 MEDIUM 5.5 CVE-2026-53365 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message … Linux Kernel 6.18.34 / 7.0.11+ Fix from $1,6002026-07-13 HIGH 7.5 CVE-2026-61870 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation f… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-11 MEDIUM 6.5 CVE-2026-56366 ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this … Imagemagick 6.9.13-43 / 7.1.2-18+ Fix from $1,6002026-07-10 MEDIUM 6.5 CVE-2026-57027 A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX … Junos 23.2+ Fix from $1,6002026-07-09 HIGH 7.5 CVE-2026-10699 Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Tra… Moveit Transfer 2025.0.8 / 2025.1.4+ Fix from $1,9502026-07-08 HIGH 7.5 CVE-2026-13698 A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-cry… Openvpn 2.6.21 / 2.7.5+ Fix from $1,9502026-07-06 HIGH 7.5 CVE-2026-13708 Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wi… Patch available Fix from $1,9502026-07-06 MEDIUM 5.5 CVE-2026-53345 In the Linux kernel, the following vulnerability has been resolved: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying When m… Linux Kernel 6.6.143 / 6.12.94+ Fix from $1,6002026-07-01 MEDIUM 5.3 CVE-2026-56365 ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failur… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,6002026-06-30 HIGH 7.5 CVE-2026-50254 An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-pro… Mitigation only Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-35505 An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows unt… Mitigation only Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-13474 Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the v… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $1,9502026-06-30 MEDIUM 6.9 CVE-2026-53429 Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered documen… Patch available Fix from $1,6002026-06-29 HIGH 7.5 CVE-2026-56018 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In JsMinify (XS.xs) … Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.5 CVE-2026-13593 CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify function has a memory leak … Mitigation only Fix from $1,6002026-06-29 MEDIUM 5.5 CVE-2026-53308 In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use dev… Linux Kernel 7.0.10+ Fix from $1,6002026-06-26 MEDIUM 5.5 CVE-2026-53261 In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free devlink relation state is norm… Linux Kernel 6.12.94 / 6.18.36+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53252 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in B… Linux Kernel 5.11 / 6.1.176+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53258 In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is leaked if cf… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53226 In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove The driver allocates domain… Linux Kernel 6.18.36 / 7.0.13+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-53227 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR After the patch in the "Fix… Linux Kernel 5.10.259 / 5.15.210+ Fix from $1,6002026-06-25