A vulnerability in the Linux kernel's SMB client was fixed to prevent data corruption caused by concurrent writes combined with file truncation (O_TRUNC). The flaw allowed buffered writes to dirty pages after a flush but before truncation, leading to silent data loss. The fix ensures atomicity of the flush-truncate-resize sequence by properly acquiring necessary locks.
CVE-2026-87101 is a vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587 that allows sensitive information disclosure due to improper token validation. The flaw affects local attack vectors with low complexity and no privileges required, but no user interaction is needed. The vulnerability has a medium severity rating with a CVSS score of 6.2.
CVE-2026-87102 is a vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587 that allows sensitive information disclosure and manipulation due to improper token validation. The flaw affects versions prior to build 42587 and has a high severity rating with a CVSS score of 7.4. The vulnerability involves incorrect handling of tokens, which could lead to unauthorized access and modification of sensitive data.
A vulnerability in the Linux kernel's NTFS implementation involves improper handling of attribute record resizing. Specifically, the attribute payload is moved after shrinking its record, causing memory corruption that leads to malformed mapping pairs arrays. This issue has been resolved by changing the order of operations to move the payload before shrinking the record.
A use-after-free vulnerability in the Linux kernel's workqueue subsystem was fixed by correcting the lifetime management of unbound worker pools for pending per-CPU workqueues (pwqs). The flaw allowed a freed worker_pool to be accessed, causing a kernel slab-use-after-free error detected by KASAN.
CVE-2026-87103 is a vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587 that allows sensitive information disclosure and manipulation due to improper token validation. The flaw impacts confidentiality and integrity but does not affect availability. The CVSS 3.0 score rates this as a high severity issue. No official patch or remediation details are provided in the available data.
A vulnerability in the Linux kernel's NTFS filesystem code involves improper locking in the ntfs_setattr_size() function. The function updates file size and resizes on-disk attributes without holding the required invalidate_lock, potentially causing race conditions with page faults. This can lead to spurious SIGBUS signals and inconsistent file size state during concurrent access.
Linux binaries in Acronis Cyber Protect 17 (Linux) before build 42587 have the executable stack attribute enabled, which can increase the risk of exploitation. This vulnerability is identified as CVE-2026-87878 and has a medium severity rating with a CVSS score of 6.3.
CVE-2026-87879 is a medium severity vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587. It involves sensitive information disclosure caused by improper token validation.
A vulnerability in the Linux kernel scheduler subsystem (sched_ext) involves incorrect handling of bypass dispatch claims for schedulers bypassed by an ancestor. This flaw causes some descendant schedulers to either leak claims or fail to claim bypass dispatch properly, leading to potential task scheduling issues during power management suspend and resume cycles.
CVE-2026-87100 is a vulnerability in Acronis Cyber Protect 17 (Linux) before build 42587 caused by missing binary hardening, leading to a protection mechanism failure. The flaw has a low severity score of 3.6 and impacts confidentiality and integrity with limited attack vector and privileges required.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a low privileged attacker with remote access to gain unauthorized access. The vulnerability has a high severity score of 8.8 (CVSS 3.1) indicating critical impact on confidentiality, integrity, and availability.
A cross-site scripting (XSS) vulnerability exists in Acronis Cyber Protect 17 (Linux, Windows) before build 42587 due to improper input validation. This vulnerability could allow an attacker with high privileges and user interaction to execute malicious scripts, potentially compromising confidentiality and integrity. The vulnerability has a CVSS 3.0 score of 5.7, indicating medium severity.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an out-of-bounds write vulnerability. This flaw could be exploited by a low privileged attacker with remote access to cause a denial of service condition.
CVE-2026-87098 is a vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587 that allows sensitive information disclosure due to improper authorization. The flaw has a low severity rating with a CVSS score of 3.1. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.
CVE-2026-87097 is a medium severity vulnerability in Acronis Cyber Protect 17 (Linux, Windows) before build 42587. It involves sensitive information disclosure caused by insufficiently protected credentials. The vulnerability does not affect integrity or availability but allows an attacker with low privileges to access sensitive data. No public exploits or known active exploitation have been reported.
A link following vulnerability exists in the Data Shredder components of Norton Antivirus, Avast Antivirus, and AVG Internet Security on Windows versions prior to 26.5.10933. This vulnerability allows a local, low-privileged attacker to escalate privileges to SYSTEM by exploiting the shred operation to delete arbitrary files or folders.
A vulnerability in Progress Telerik Document Processing Libraries prior to version 2026.3.1027 allows improper verification of cryptographic signatures and certificate validation in RadPdfProcessing. This flaw enables an unauthenticated attacker to craft a signed PDF document that causes the signature validation to incorrectly report forged content as unmodified and the signing certificate as valid.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper authentication vulnerability. This flaw allows a low privileged attacker with remote access to potentially bypass protection mechanisms. The vulnerability has a high severity with a CVSS score of 8.3. No public exploits or known active exploitation are reported. Patch status is not confirmed due to lack of vendor advisory or patch information.
Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8, including several LTS releases, contain an SQL Injection vulnerability. This flaw allows a low privileged remote attacker to potentially gain unauthorized access to managed systems. The vulnerability is critical with a CVSS score of 9.6, indicating high impact on confidentiality and integrity without requiring user interaction.