Vuldb Updates

A vulnerability was found in Adobe InDesign Desktop up to 20.5.3/21.3. It has been classified as critical. The affected element is an unknown function of the component File Handler. The manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-48293. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Adobe Substance3D Sampler up to 6.0.0 and classified as critical. Impacted is an unknown function of the component File Handler. Such manipulation leads to out-of-bounds write. This vulnerability is listed as CVE-2026-34710. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in Adobe Substance3D Sampler up to 6.0.0. It has been classified as critical. The affected element is an unknown function of the component File Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-34709. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Adobe Dreamweaver Desktop up to 21.7. It has been declared as critical. The impacted element is an unknown function. Executing a manipulation can lead to dependency on vulnerable third-party component. This vulnerability is registered as CVE-2026-47906. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in Adobe Dreamweaver Desktop up to 21.7. Affected by this issue is some unknown functionality of the component File Handler. Performing a manipulation results in improper access controls. This vulnerability is known as CVE-2026-47907. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in NLnet Labs Unbound up to 1.25.0. This affects an unknown part. Such manipulation leads to numeric truncation error. This vulnerability is referenced as CVE-2026-42944. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability was found in morgan up to 1.10.1/1.10.x and classified as problematic. Affected is an unknown function of the component Authorization Handler. Executing a manipulation can lead to improper output neutralization for logs. This vulnerability is tracked as CVE-2026-5078. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Denx U-Boot 1.1.3. Affected is an unknown function of the component ZFS Filesystem Support. This manipulation causes integer overflow. This vulnerability is tracked as CVE-2025-70290. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in expressjs Morgan up to 1.11.x. This affects an unknown function. Such manipulation leads to improper output neutralization for logs. This vulnerability is traded as CVE-2026-15603. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as problematic has been found in phpSysInfo up to 3.4.5. Affected is an unknown function of the file read_config.php. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-55584. The attack is possible to be carried out remotely. Moreover, an exploit is present. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in GitoxideLabs Gitoxide up to 0.21.4. This affects an unknown part of the component Gix-Packetline. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2026-82250. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability classified as problematic was found in GitoxideLabs gitoxide up to 0.49.0. This vulnerability affects unknown code of the component gix-url. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-82247. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability marked as very critical has been reported in DENX U-Boot up to 2026.03. Affected by this vulnerability is the function ext4fs_get_bgdtable. The manipulation leads to integer overflow. This vulnerability is referenced as CVE-2025-70293. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in grpc-ecosystem grpc-gateway 2.28.0 and classified as critical. This impacts the function ServeMux.ServeHTTP of the component Method Override Handler. Performing a manipulation of the argument X-HTTP-Method-Override results in improper access controls. This vulnerability is known as CVE-2026-37236. Remote exploitation of the attack is possible. No exploit is available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.1.184/6.6.153/6.12.105/6.18.46. Affected by this issue is the function skb_gro_receive of the component GRO. The manipulation of the argument mac_header/head/protocol/encapsulation/encap_mark/proto leads to out-of-bounds write. This vulnerability is listed as CVE-2026-80725. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.182/6.6.150/6.12.102/6.18.43/7.1.7. Impacted is the function kvm_zpci_set_airq of the component KVM PCI. Such manipulation of the argument aibv/aisb leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-80684. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as very critical has been found in Linux Kernel up to 6.1.183/6.6.152/6.12.102/6.18.43/7.1.7. The affected element is the function migrate_vma_collect_pmd of the component Device Migration. Performing a manipulation results in use of uninitialized variable. This vulnerability was named CVE-2026-80686. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.18.43/7.1.7. The impacted element is the function snapshot_page of the component mm/util. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2026-80685. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is advised.

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.43/7.1.7. This issue affects the function sco_conn_del of the file sco_conn_del.isra.0 of the component Bluetooth. The manipulation of the argument conn leads to use after free. This vulnerability is uniquely identified as CVE-2026-80683. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 7.1.7. This vulnerability affects the function sparse_init of the file mm/sparse.c of the component RISC-V Memory Management. The manipulation results in encoding error. This vulnerability is known as CVE-2026-80682. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.