CVE-2026-78376High 8.8Webkitgtk: use-after-free of jscvalue function parameters0.5%
CVE-2026-78323Medium 6.5Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates0.2%
CVE-2026-73199Medium 6.5Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value0.4%
CVE-2026-11861Critical 9.6Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships0.4%
CVE-2026-73198High 7.5Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read0.5%
CVE-2026-13097High 8.7Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore0.8%
CVE-2026-73196Medium 4.3Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding0.4%
CVE-2026-73197High 7.5Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read0.6%
CVE-2026-18917High 7.8Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow0.2%
CVE-2026-77014Medium 5.3Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses0.2%
CVE-2026-43961High 7.8Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution0.2%
CVE-2026-75032Medium 6.3Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder0.2%
CVE-2026-58224Medium 6.5Samba: ctdb fails to do integrity checking of received packets0.3%
CVE-2026-19617Medium 5.5Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser0.2%
CVE-2026-73584Medium 6.3Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling0.1%
CVE-2026-73583Medium 6.6Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr0.1%
CVE-2026-73585Medium 6.3Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack0.1%
CVE-2026-19654High 7.5Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd0.8%
CVE-2026-19548Medium 5.5Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing0.2%
CVE-2026-18663Medium 5.9389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control0.5%
CVE-2026-19550High 8.2Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes0.5%
CVE-2026-19546High 8.8Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute0.4%
CVE-2026-72693High 7.8Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login0.1%
CVE-2026-72694High 7.1Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation0.1%
CVE-2026-63622High 7.8Libvirt: swtpm privilege escalation via symlink following0.1%
CVE-2026-59091High 7.3Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file0.4%
CVE-2026-63623Medium 5.5Libvirt: information disclosure via world-readable storage volume images during clone/convert<0.1%
CVE-2026-59090High 8.4Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow0.6%
CVE-2026-59088Medium 5.5Gimp: gimp: denial of service via signed integer overflow in fli file processing0.3%
CVE-2026-59087High 7.8Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation0.5%
CVE-2026-19404Medium 6.5389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance0.4%
CVE-2026-42170High 7.8Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)0.2%
CVE-2026-61477Low 2.3Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection0.2%
CVE-2026-18938Medium 6.2P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems0.1%
CVE-2026-18839Low 2.2Popt-devel: popt-static: size_t underflow in singleoptionhelp0.1%
CVE-2026-44605Medium 5.5Rpm: heap buffer overflow in ndb slot table parsing0.2%
CVE-2026-18103Medium 4.9Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi0.7%
CVE-2026-68743Medium 5.5Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v10.1%
CVE-2026-70368Medium 6.5Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message0.4%
CVE-2026-70367Medium 5.4Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services0.2%
CVE-2026-18739Low 2.5Popt-devel: popt-static: off-by-one in poptstuffargs0.1%
CVE-2026-18651Medium 5.4389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account0.3%
CVE-2026-18508Medium 4.4Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite0.1%
CVE-2026-68742Medium 5.5Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr0.1%
CVE-2026-6695Medium 5.5Gimp: gimp: remote code execution via crafted paa file0.3%