NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller
CVE-2026-79976
The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file,
#advisory
共收录 22948 条相关情报。
← 返回所有主题Out-of-bounds write in the Nuvoton NPCX eSPI Target-Attached-Flash receive path from an unvalidated host-supplied packet length
CVE-2026-78119
The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c),
Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP
CVE-2026-78118
The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it
Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air
CVE-2026-78117
The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet
Out-of-bounds read in Bluetooth Classic A2DP codec information element handling
CVE-2026-18748
The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field
Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path
CVE-2026-78116
The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails
PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode
CVE-2026-19676
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec
Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing
CVE-2026-113870
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl
LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects
CVE-2026-114493
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that vali
pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images
CVE-2026-114491
pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG conten
Nuxt server islands render `useHeadSafe` input without sanitisation
CVE-2026-114133
Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer seriali
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
CVE-2026-114132
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d
Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes
CVE-2026-114131
Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rul
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
CVE-2026-114130
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows
stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
CVE-2026-114129
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
CVE-2026-114125
**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affect
Electron: HID and USB permission checks can be attributed to the wrong origin
CVE-2026-113800
### Impact For `hid` and `usb` permission checks made from an iframe, `session.setPermissionCheckHandler` was given the
【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.7 模型下线及切换升级的通知
【大模型服务平台 TokenHub】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.7 模型下线及切换升级的通知
【紧急公告】部分免费 SSL 证书将于 2026 年 10 月 18 日 被吊销，请立即更换
【紧急公告】部分免费 SSL 证书将于 2026 年 10 月 18 日 被吊销，请立即更换
【腾讯云认证】数据库交付运维专家 - 腾讯云TDSQL(PostgreSQL版) 认证升级公告
【腾讯云认证】数据库交付运维专家 - 腾讯云TDSQL(PostgreSQL版) 认证升级公告