Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-14164

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()_CVE-2026-14164

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer m...

Red Hat Red Hat Enterprise Linux 10 CVE
HIGH 8 CVE-2026-12240

Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field_CVE-2026-12240

The Export User Data plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unserialize func...

qlstudio Export User Data CVE
HIGH 8.4 CVE-2026-12578

DTMSoft – Deserialization of Untrusted Data Vulnerability_CVE-2026-12578

The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.

deltaww DTMSoft * CVE
HIGH 8.8 THN:9247B208C4F...

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs_THN:9247B208C4FFADCDFC198B9F5D16121C

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgEWbrJH-z_uAL6GFaOqplYF1ewSOBvFpaKD24W74VEBaSO-pW3sy0I0e57Bmc9yBKV4vb6zWYaVjd-oTSy2...

N/A N/A THN
HIGH 7 CVE-2026-46309

drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise_CVE-2026-46309

In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add v...

Linux Linux ada7486c5668db542a7d361268df931aca5b726a CVE
HIGH 7 CVE-2026-53059

dm log: fix out-of-bounds write due to region_count overflow_CVE-2026-53059

In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variab...

Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 CVE
HIGH 7 CVE-2026-52972

crypto: af_alg – Cap AEAD AD length to 0x80000000_CVE-2026-52972

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithme...

Linux Linux 400c40cf78da00c16e561a3a253ca272455c42ef CVE
HIGH 7 CVE-2026-52969

KVM: Reject wrapped offset in kvm_reset_dirty_gfn()_CVE-2026-52969

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty_gfn() gua...

Linux Linux fb04a1eddb1a65b6588a021bdc132270d5ae48bb CVE
HIGH 7 CVE-2026-53196

USB: serial: io_ti: fix heap overflow in get_manuf_info()_CVE-2026-53196

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() re...

Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 CVE
HIGH 7 CVE-2026-53148

thunderbolt: Clamp XDomain response data copy to allocation size_CVE-2026-53148

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_prope...

Linux Linux cdae7c07e3e3509eaabc18c1640a55dc5b99c179 CVE