Not analysed
CVE-2026-115889: Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Details
- Severity
- Critical · CVSS 9.9
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115893: Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Details
- Severity
- Critical · CVSS 9.9
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-16762: Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
Details
- Severity
- Moderate
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115775: Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Details
- Severity
- Moderate
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115774: Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Details
- Severity
- Moderate · CVSS 4.9
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115778: Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Details
- Severity
- Moderate · CVSS 7.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115776: Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Details
- Severity
- Moderate · CVSS 7.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115877: Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Details
- Severity
- Moderate · CVSS 5.4
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115897: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
Details
- Severity
- Low
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115754: serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
Details
- Severity
- Low · CVSS 4.7
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-116137: adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
Details
- Severity
- Moderate · CVSS 3.7
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115484: Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
Details
- Severity
- Important · CVSS 7.6
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115486: Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
Details
- Severity
- Moderate · CVSS 7.1
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-115485: Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
Details
- Severity
- Moderate · CVSS 6.3
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99216: Drivers: hv: Don't reset VMBus connection state on error/exit paths
Details
- Severity
- Moderate · CVSS 5.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99215: power: supply: core: prevent unregistering a power supply while a callback runs
Details
- Severity
- Moderate · CVSS 5.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99213: vsock: treat TCP_CLOSING as once-established
Details
- Severity
- Moderate · CVSS 5.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99212: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
Details
- Severity
- Moderate · CVSS 5.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99211: netlink: reset skb headers before unicast and multicast filtering
Details
- Severity
- Moderate · CVSS 5.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99206: scsi: target: iscsi: Fix race in discovery auth updates
Details
- Severity
- Moderate · CVSS 4.1
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99204: ocfs2/dlm: Protect the recovery list during debugfs reads
Details
- Severity
- Moderate · CVSS 7.1
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99203: pipe: preserve existing fasync readers on writer setup failure
Details
- Severity
- Moderate · CVSS 4.7
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99201: netlink: avoid hashing the network namespace pointer
Details
- Severity
- Low · CVSS 3.3
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99192: net: bcmgenet: unshare the skb before writing the control block
Details
- Severity
- Important · CVSS 7.8
- Type
- Security updates
- Tags
- Mariner, 2026-Oct
Not analysed
CVE-2026-99191: calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
Details
- Severity
- Moderate · CVSS 6.5
- Type
- Security updates
- Tags
- Mariner, 2026-Oct