CVE-2026-93515 is a use-after-free vulnerability in the Present Extension of the Xorg server. This flaw involves cross-window notification handling that may lead to memory corruption. The vulnerability affects multiple specific Ubuntu package versions of xorg-server. No CVSS score or detailed technical exploitation information is provided. The severity is assessed as medium based on the described impact.
A heap buffer overflow vulnerability exists in the GLX RenderLarge component of the Xorg server. This vulnerability affects multiple specific versions of the xorg-server package. The issue is classified with medium severity. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild and no vendor patch or remediation details are included in the provided data.
CVE-2026-93518 is a medium severity vulnerability in the Xorg server related to numeric truncation in the XKB ResizeKeyType functionality. It affects multiple specific Ubuntu package versions of the xorg-server. No CVSS score or detailed technical impact is provided. There is no information on available patches or exploits in the wild.
A buffer overflow vulnerability exists in the XFixes Pointer Barrier Event handling of the xorg-server. This flaw could potentially allow an attacker to cause unexpected behavior or crashes in the Xorg server. The issue affects multiple specific versions of the xorg-server package as listed. No CVSS score is provided, but the severity is assessed as medium based on available information.
A heap out-of-bounds write vulnerability exists in the XKB ChangeKeycodeRange functionality of the xorg-server. This issue affects multiple specific Ubuntu package versions of xorg-server. The vulnerability is classified as medium severity. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches in the provided data.
A heap buffer overflow vulnerability exists in the RandR ChangeProviderProperty functionality of the xorg-server. This vulnerability affects multiple specific Ubuntu package versions of xorg-server. The severity is assessed as medium. No CVSS score or detailed technical exploitation information is provided. No known exploits are reported in the wild. No patch or remediation information is available in the provided data.
A heap buffer overflow vulnerability exists in the Glamor CopyArea component of the Xorg server. This vulnerability is identified as CVE-2026-93522 and affects multiple specific versions of the xorg-server package. The issue could potentially lead to memory corruption. The severity is assessed as medium. No CVSS score or detailed technical exploit information is provided. No known exploits are reported in the wild. The vulnerability affects various Ubuntu package versions of xorg-server.
CVE-2026-93523 is an out-of-bounds write vulnerability in the XInput2 PassiveUngrabDevice modifier of the xorg-server. It affects multiple specific Ubuntu package versions of xorg-server. The vulnerability is classified as medium severity. There is no CVSS score or detailed technical information available. No known exploits in the wild have been reported. Patch or remediation status is not provided in the available data.
CVE-2026-93524 is a medium severity vulnerability in the xorg-server related to an out-of-bounds read caused by a desynchronization between XKB SetMap key width and action count. It affects specific Ubuntu package versions of xorg-server. No CVSS score or detailed exploit information is available.
CVE-2026-93536 is a use-after-free vulnerability in the GestureBuildSprite component of the Xorg server. It affects multiple Ubuntu package versions of xorg-server. The vulnerability is rated medium severity. No CVSS score or detailed technical impact information is provided. There are no known exploits in the wild and no patch or remediation details are available in the provided data.
An improper input validation vulnerability exists in the AMD ROCm Communication Collectives Library (RCCL) that could allow a compromised peer rank or a network-adjacent attacker to dereference an attacker-controlled pointer. This flaw could potentially lead to remote code execution. The vulnerability affects specific versions of the RCCL library as listed. The CVSS 4.0 vector rates this as medium severity with network attack vector, high complexity, and limited privileges required. No known exploits are reported in the wild, and no patch or remediation details are provided in the source data.
A race condition vulnerability in the SSSD autofs responder allows a local user to cause a Denial of Service (DoS) by triggering excessive memory consumption. This occurs when concurrent map enumeration and invalidation requests lead to memory leaks, potentially disrupting or crashing the autofs service. The issue affects multiple specific versions of SSSD. The CVSS score is 4.7, indicating a medium severity level.
A memory management flaw in SSSD (System Security Services Daemon) affects versions including 1.12.5-2 through 2.12.0-1ubuntu5.5. When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without clearing or timing out. This allows a local attacker to repeatedly initiate authentication flows without completing them, leading to unbounded memory consumption and potential denial of service by degrading or terminating SSSD authentication services.
A heap-based buffer overflow vulnerability exists in GIMP's DirectDraw Surface (DDS) loader. The flaw arises from integer overflow in buffer size calculations when loading crafted DDS images, leading to heap corruption and potential arbitrary code execution within the GIMP process.
A heap-based buffer overflow vulnerability exists in the H5VM_array_fill() function in src/H5VM.c in HDF5 versions before 2.2.0. This flaw allows a remote attacker to cause an application crash and potentially execute arbitrary code by using a specially crafted HDF5 file. The vulnerability arises when reading a dataset's unallocated chunks, where inconsistent metadata causes writes beyond the allocated buffer size. The attacker can control the content written via the fill value stored in the file.
A vulnerability in SSSD when configured to use Microsoft Entra ID allows local users to submit crafted lookup requests that are not properly sanitized. This can manipulate directory query filters and lead to unauthorized information disclosure. The flaw affects multiple specific versions of SSSD. The vulnerability has a medium severity rating with a CVSS score of 5.3.
A vulnerability in SSSD affects trust-enabled identity management environments where Host-Based Access Control (HBAC) rules are improperly evaluated. The flaw causes SSSD to strip domain qualifiers and compare only short usernames, allowing an authenticated user in a trusted domain with the same username as a local authorized account to bypass access policies and gain unauthorized access to protected services or hosts. This vulnerability has a CVSS score of 8.1, indicating a high impact on confidentiality and integrity but no impact on availability. Multiple specific versions of SSSD are affected.
CVE-2026-105239 is a vulnerability in Apache log4net's EventLogAppender on Windows platforms. It involves improper neutralization of the null byte (NUL) character in logged content, causing the Windows Event Log record to terminate prematurely. As a result, any log content after the NUL character, including exception details and trailing fields, is not stored. This allows an attacker who can influence log messages to hide parts of the log record. The issue affects log4net versions from 1.2.9 up to but not including 3.5.0. Upgrading to version 3.5.0 resolves the vulnerability.
CVE-2026-105240 is a vulnerability in Apache log4net's OutputDebugStringAppender on Windows platforms. It involves improper neutralization of the null byte (NUL) character in logged content, causing the debug output record to terminate prematurely and omit subsequent data such as exception details. This allows a party whose data is logged to hide parts of the log message. The issue affects log4net versions from 1.2.9 up to but not including 3.5.0. Upgrading to version 3.5.0 resolves the vulnerability.
CVE-2026-105241 is a medium severity vulnerability in Apache log4net's SmtpPickupDirAppender component. It involves improper handling of Unicode encoding, where unpaired UTF-16 surrogates cause the mail file writer to throw an error. This results in discarding all buffered events in the batch and potentially leaving truncated mail files in the pickup directory. The vulnerability affects applications using SmtpPickupDirAppender in log4net versions from 1.2.9 up to but not including 3.5.0. Upgrading to version 3.5.0 resolves the issue.