Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Openssh: denial-of-service in openssh

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Hercules Augeas fa.c re_case_expand null pointer dereference

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

BCryptGenerateSymmetricKey memory leak

DNSSEC validation may accept broken authentication chains

Net::IMAP vulnerable to possible DoS by memory exhaustion

vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache

Windows Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Tampering Vulnerability