CVE-2026-106212 - Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106211 - Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leverag

CVE-2026-106210 - Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker t

CVE-2026-106209 - UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote at

CVE-2026-106208 - Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker lever

CVE-2026-106207 - Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar

CVE-2026-106206 - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remo

CVE-2026-106205 - Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a r

CVE-2026-106204 - Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute a

CVE-2026-106203 - Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote at

CVE-2026-106202 - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remo

CVE-2026-106201 - Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar

CVE-2026-106200 - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute

CVE-2026-106199 - Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a rem

CVE-2026-106198 - Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106197 - Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execu

CVE-2026-106196 - Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remo

CVE-2026-106195 - Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a re

CVE-2026-106194 - Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote att

CVE-2026-106193 - Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execut

CVE-2026-106192 - Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacke

CVE-2026-106191 - Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who

CVE-2026-106190 - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute

CVE-2026-106189 - Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote atta

CVE-2026-106188 - Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote att

CVE-2026-106187 - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attack

CVE-2026-106186 - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0

CVE-2026-106185 - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker w

CVE-2026-106184 - Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to

CVE-2026-106183 - Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a

CVE-2026-106182 - UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to s

CVE-2026-106181 - Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote

CVE-2026-106180 - Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106179 - UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote atta

CVE-2026-106123 - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w

CVE-2026-106122 - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w

CVE-2026-106121 - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w

CVE-2026-106120 - LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2

CVE-2026-106119 - LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHi

CVE-2026-106118 - ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destina

CVE-2026-106033 - A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvali

CVE-2026-105488 - Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an aut

CVE-2026-105485 - Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier a

CVE-2026-104945 - TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP han

CVE-2026-104944 - TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Devic

CVE-2026-104073 - NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allow

CVE-2026-103778 - Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic

CVE-2026-103620 - A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repo

CVE-2026-102322 - Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote at

CVE-2026-0198 - In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission che

CVE-2026-88252 - A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the respond

CVE-2026-66666 - Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retri

CVE-2026-106117 - ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group

CVE-2026-106116 - ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-b

CVE-2026-106115 - ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocate

CVE-2026-106114 - ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates al

CVE-2026-106113 - ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit fl

CVE-2026-106112 - ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than

CVE-2026-106111 - ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression

CVE-2026-106110 - ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocate

CVE-2026-106109 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 unt

CVE-2026-106107 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0

CVE-2026-106106 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quas

CVE-2026-106105 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quas

CVE-2026-106104 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.

CVE-2026-106103 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quas

CVE-2026-101207 - Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains a

CVE-2025-45871 - LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataS

CVE-2026-95153 - An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admi

CVE-2026-95140 - kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java

CVE-2026-106219 - In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local

CVE-2026-106218 - In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the serv

CVE-2026-106102 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.

CVE-2026-106101 - Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.

CVE-2026-106100 - Payload is a free and open source headless content management system. In @payloadcms/db-mongodb vers

CVE-2026-105957 - A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected elemen

CVE-2026-105868 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105867 - Payload is a free and open source headless content management system. In @payloadcms/storage-s3 vers

CVE-2026-105866 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105865 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105864 - Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-te

CVE-2026-105863 - Payload is a free and open source headless content management system. In versions after 3.0.0 and be

CVE-2026-105862 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105861 - Payload is a free and open source headless content management system. In versions after 3.0.0 and be

CVE-2026-105860 - Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-te

CVE-2026-105859 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105858 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105857 - Payload is a free and open source headless content management system. In @payloadcms/plugin-form-bui

CVE-2026-105856 - Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-cana

CVE-2026-105855 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105854 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105853 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105852 - Payload is a free and open source headless content management system. In versions before 3.90.0 and

CVE-2026-105851 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105850 - Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerc

CVE-2026-105849 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105848 - Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe v

CVE-2026-105847 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105846 - Payload is a free and open source headless content management system. In versions from 3.40.0 before

CVE-2026-104850 - MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. St

CVE-2026-104070 - The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows

CVE-2025-71384 - Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS com

CVE-2025-71383 - Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the l

CVE-2026-76105 - Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random

CVE-2026-70411 - Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication fo

CVE-2026-67273 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of S

CVE-2026-67270 - Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Vali

CVE-2026-63691 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnera

CVE-2026-63690 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Cr

CVE-2026-63689 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Infor

CVE-2026-61411 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Infor

CVE-2026-26287 - External Secrets Operator reads information from a third-party service and automatically injects the

CVE-2026-105950 - A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the fun

CVE-2026-105845 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105844 - Payload is a free and open source headless content management system. In versions from 3.0.0 before

CVE-2026-105806 - Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp vers

CVE-2026-105805 - Payload is a free and open source headless content management system. In versions before 3.88.0 and

CVE-2026-105804 - Payload is a free and open source headless content management system. Payload versions from 3.0.0 be

CVE-2026-67269 - Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privile

CVE-2026-63692 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Cr

CVE-2026-63688 - Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication f

CVE-2026-61421 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credential

CVE-2026-54472 - Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credential

CVE-2026-105922 - A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get

CVE-2026-105921 - A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e96643

CVE-2026-105801 - openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generato

CVE-2026-105800 - i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, bro

CVE-2026-105799 - LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis doe

CVE-2026-105798 - SimpleChat is a secure AI conversation application with personal and group workspaces for document-g

CVE-2026-105797 - SimpleChat is a secure AI conversation application with personal and group workspaces for document-g

CVE-2026-105796 - Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP

CVE-2026-105795 - Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-ca

CVE-2026-105794 - MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rus

CVE-2026-105793 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105792 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105791 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-104069 - HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() wh

CVE-2025-8352 - Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased

CVE-2026-91140 - An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Prog

CVE-2026-87975 - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django

CVE-2026-87890 - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An inco

CVE-2026-85523 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-84429 - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django

CVE-2026-82924 - Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet In

CVE-2026-77178 - Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host

CVE-2026-77050 - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django

CVE-2026-34498 - Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows

CVE-2026-12380 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-106041 - Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allow

CVE-2026-106040 - Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allow

CVE-2026-106039 - Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allow

CVE-2026-106038 - Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allo

CVE-2026-106037 - Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST serv

CVE-2026-106026 - tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/re

CVE-2026-105920 - A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e96643

CVE-2026-105842 - lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz r

CVE-2026-105841 - lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe

CVE-2026-105840 - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted

CVE-2026-105839 - libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allow

CVE-2026-105838 - libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker load

CVE-2026-105837 - libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that

CVE-2026-105790 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105789 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105788 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2025-15591 - Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could

CVE-2026-82531 - Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level

CVE-2026-106016 - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 an

CVE-2026-105919 - A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff7

CVE-2026-105836 - QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::aja

CVE-2026-105835 - PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/

CVE-2026-105834 - Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the proj

CVE-2026-56596 - HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could

CVE-2026-105918 - A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e96643

CVE-2026-75820 - GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modul

CVE-2026-75819 - GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp.

CVE-2026-75818 - GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in pro

CVE-2026-105985 - Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Pan

CVE-2026-103831 - CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the Tr

CVE-2026-84854 - In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when cal

CVE-2026-80327 - An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects

CVE-2026-98372 - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read

CVE-2026-98371 - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembl

CVE-2026-98370 - In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI reque

CVE-2026-98369 - In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock

CVE-2026-98368 - In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed

CVE-2026-98367 - In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association und

CVE-2026-98366 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags

CVE-2026-98365 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow

CVE-2026-98364 - In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference

CVE-2026-98363 - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS

CVE-2026-98362 - In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS ind

CVE-2026-98361 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE

CVE-2026-98360 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_t

CVE-2026-98359 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering

CVE-2026-98358 - In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invali

CVE-2026-98357 - In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred con

CVE-2026-98356 - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: check create_sing

CVE-2026-98355 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null k

CVE-2026-98354 - In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer le

CVE-2026-98353 - In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray

CVE-2026-98352 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak

CVE-2026-98351 - In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when

CVE-2026-98350 - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID

CVE-2026-98349 - In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short

CVE-2026-98348 - In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short

CVE-2026-98347 - In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER_

CVE-2026-98346 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the r

CVE-2026-98345 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header

CVE-2026-98344 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref unde

CVE-2026-98343 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free i

CVE-2026-98342 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers

CVE-2026-98341 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driv

CVE-2026-98340 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidd

CVE-2026-98339 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by

CVE-2026-98338 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS e

CVE-2026-98337 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't start a R

CVE-2026-98336 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't offload T

CVE-2026-98335 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitc

CVE-2026-98334 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state whe

CVE-2026-98333 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the LED s

CVE-2026-98332 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on

CVE-2026-98331 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs whe

CVE-2026-98330 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy o

CVE-2026-98329 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow inj

CVE-2026-98328 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz ca

CVE-2026-98327 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: reset the

CVE-2026-98326 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release t

CVE-2026-98325 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set up the TX i

CVE-2026-98324 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double coun

CVE-2026-98323 - In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented head

CVE-2026-98322 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_nat: fully initi

CVE-2026-98321 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister a

CVE-2026-98320 - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold refe

CVE-2026-98319 - In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_pending_vblank_eve

CVE-2026-98318 - In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute

CVE-2026-98317 - In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to N

CVE-2026-98316 - In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix race between

CVE-2026-98315 - In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates w

CVE-2026-98314 - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer->private_d

CVE-2026-98313 - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when

CVE-2026-98312 - In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from

CVE-2026-98311 - In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer

CVE-2026-98310 - In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime

CVE-2026-98309 - In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS pollin

CVE-2026-98308 - In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only

CVE-2026-98307 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cleanup arsta in

CVE-2026-98306 - In the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKB_L3SLAVE from IP

CVE-2026-98305 - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the

CVE-2026-98304 - In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hard

CVE-2026-98303 - In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHA