FileInfo can escape from a Root in os

Panic in name constraint checking for malformed certificates in crypto/x509

Incorrect enforcement of email constraints in crypto/x509

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libsoup: libsoup: http request smuggling via duplicate content-length headers

node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Chromium: CVE-2026-2650 Heap buffer overflow in Media

Chromium: CVE-2026-2649 Integer overflow in V8

Chromium: CVE-2026-2648 Heap buffer overflow in PDFium

Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function

Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2

Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c

Windows Projected File System Elevation of Privilege Vulnerability

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability