CVE-2026-4892

CVE-2026-4891

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

CVE-2026-4890

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks

httpc leaks Authorization header to cross-origin redirect targets

SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

ws: Memory exhaustion DoS from tiny fragments and data chunks

connection reuse ignores TLS requirement

radvdump's Route Information Option Parser has a Stack Buffer Overflow

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Exchange Online Elevation of Privilege Vulnerability

Surface Broker SDMA Elevation of Privilege Vulnerability