List of all vulnerabilities

Report a vulnerability
CVE-2026-0966 – Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
3/26/2026
Affected packages: libssh
Medium severity
CVE-2026-0966 – Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
3/26/2026
Affected packages: libssh
Medium severity
CVE-2026-33536 – ImageMagick has an Out-of-bounds Write via InterpretImageFilename
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33536 – ImageMagick has an Out-of-bounds Write via InterpretImageFilename
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33535 – ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33535 – ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33636 – LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
3/26/2026
Affected packages: conf-gd • conf-libpng • grib • qrencode
High severity
CVE-2026-33416 – LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
3/26/2026
Affected packages: conf-gd • conf-libpng • grib • qrencode
High severity
CVE-2026-33416 – LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
3/26/2026
Affected packages: conf-gd • conf-libpng • grib • qrencode
High severity
CVE-2026-23398 – icmp: fix NULL pointer dereference in icmp_tag_validation()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23398 – icmp: fix NULL pointer dereference in icmp_tag_validation()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23397 – nfnetlink_osf: validate individual option lengths in fingerprints
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23397 – nfnetlink_osf: validate individual option lengths in fingerprints
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23396 – wifi: mac80211: fix NULL deref in mesh_matches_local()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23396 – wifi: mac80211: fix NULL deref in mesh_matches_local()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-34085
3/25/2026
Affected packages: conf-libfontconfig
Medium severity
CVE-2026-34085
3/25/2026
Affected packages: conf-libfontconfig
Medium severity
CVE-2026-23395 – Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
3/25/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-23395 – Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
3/25/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-23394 – af_unix: Give up GC if MSG_PEEK intervened.
3/25/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity