Dreigingen

CVE-2026-34757 LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure

Information published.

CVE-2026-34757

CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Information published.

CVE-2025-8224 GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference

Information published.

CVE-2025-8224

CVE-2026-31702 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

Information published.

CVE-2026-31702

CVE-2026-31704 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

Information published.

CVE-2026-31704

CVE-2026-31721 usb: gadget: f_hid: move list and spinlock inits from bind to alloc

Information published.

CVE-2026-31721

CVE-2026-31723 usb: gadget: f_subset: Fix net_device lifecycle with device_move

Information published.

CVE-2026-31723

CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

Information published.

CVE-2026-3087

CVE-2026-6357 pip self-update functionality can import newly installed modules after wheel installation

Information published.

CVE-2026-6357

CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Information published.

CVE-2026-45186

CVE-2026-41604 Apache Thrift: Swift Range crash in skip()

Information published.

CVE-2026-41604

CVE-2026-42246 net-imap vulnerable to STARTTLS stripping via invalid response timing

Information published.

CVE-2026-42246