Threat database

CVE-2026-39824 is a vulnerability involving an integer overflow in the NewNTUnicodeString function within the golang.org/x/sys/windows package. The issue is identified as CWE-190, which relates to integer overflow or wraparound. The affected version is exactly version 3.0. No CVSS score or detailed impact information is provided, and no known exploits or patches are currently documented.

A denial of service vulnerability exists in golang.org/x/net/html version 3.0 when parsing arbitrary HTML. This flaw could allow an attacker to cause a denial of service by triggering excessive resource consumption during HTML parsing.

A vulnerability exists in golang.org/x/net/html related to incorrect handling of namespaced elements in foreign content. This issue affects version 3.0 of the product. No CVSS score or detailed impact information is provided.

CVE-2026-39821 is a vulnerability in golang.org/x/net/idna related to the failure to reject ASCII-only Punycode-encoded labels. This issue affects version 3.0 of the Microsoft product referencing this library. No CVSS score or detailed impact information is provided.

Multiple security vulnerabilities were discovered in the Linux kernel for NVIDIA Tegra systems, including a critical flaw known as EntrySign affecting some AMD Zen processors. This flaw allows improper verification of CPU microcode signatures, potentially enabling a privileged attacker to load malicious microcode, leading to loss of system integrity and confidentiality. The update addresses numerous security issues across a wide range of kernel subsystems and drivers. A patch is available and users are advised to update to the fixed version 6.8.0-1022.22 and reboot their systems.

Multiple security vulnerabilities were discovered in the Linux kernel for Raspberry Pi, Raspberry Pi Real-time, and Xilinx systems. These include a branch predictor isolation flaw known as VMSCAPE (CVE-2025-40300) that could allow an attacker in a guest VM to expose sensitive information from the host OS. Additional flaws affect the HSI, Bluetooth, and Timer subsystems. Updates correcting these issues have been released and require a system reboot and recompilation of third-party kernel modules due to ABI changes.

Multiple security vulnerabilities were discovered in the Linux kernel for Raspberry Pi systems, affecting subsystems such as Ext4 file system, NFS server daemon, packet sockets, network traffic control, and VMware vSockets driver. These issues could potentially allow an attacker to compromise the system. A patch fixing these vulnerabilities is available in version 5.4.0-1134.147~18.04.1. Users are advised to update and reboot their systems. Due to an ABI change, third-party kernel modules may need recompilation and reinstallation.