CVE-2026-113789 is a medium severity vulnerability affecting multiple versions of pypdf2, a free and open-source pure-Python PDF library. The vulnerability was published on October 23, 2026. The CVSS 4.0 base score is 6.0, indicating a medium impact with network attack vector and low attack complexity. The vulnerability requires user interaction and privileges are not required for exploitation. No known exploits in the wild have been reported. The affected versions include various specific builds and releases of pypdf2, as listed.
A reachable exit vulnerability exists in NTPsec ntpd versions 1.1.4 through 1.2.5, allowing a remote attacker to cause a denial of service by crashing the daemon. This vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS score is 7.5, indicating a high severity level.
Apache bRPC versions prior to 1.18.0 contain a vulnerability in the Discovery naming-service reply parser. The parser improperly calls RapidJSON object-only accessors on JSON values without verifying they are objects, leading to out-of-bounds memory reads and potential client crashes when processing malformed Discovery responses. This can occur if the Discovery backend returns non-object entries in data/service members or instance lists. The issue is fixed in version 1.18.0 by validating JSON types before access.
Apache bRPC versions prior to 1.18.0 contain vulnerabilities that allow remote attackers to control file paths and cause uncontrolled resource consumption via builtin services. Attackers can create directories and overwrite files with server process privileges by manipulating runtime flags. Additionally, the profiling service can be abused to hold CPU profiling resources for extended periods, causing denial of service.
A NULL pointer dereference vulnerability exists in the RTMP protocol implementation of Apache bRPC versions prior to 1.18.0. This flaw allows remote attackers to cause a denial of service by crashing the server when a crafted createStream command is sent and the client closes the connection prematurely.
Apache bRPC versions prior to 1.18.0 have an interpretation conflict in their HTTP protocol implementation that allows remote attackers to bypass access control rules enforced by a front proxy. This occurs because the bRPC server collapses consecutive slashes in request paths, treating paths with empty segments as equivalent to their collapsed form, contrary to RFC 3986. Additionally, the HTTP/2 implementation does not properly validate the :path pseudo-header, allowing malformed requests to be accepted. This vulnerability affects deployments where bRPC is behind a front proxy that enforces access control on literal paths but forwards requests to bRPC, enabling attackers to reach restricted resources. The issue is fixed in bRPC version 1.18.0.
A use-after-free vulnerability exists in the RTMP protocol implementation of Apache bRPC versions prior to 1.18.0. This flaw occurs when a malicious RTMP peer sends a crafted Abort message that targets a chunk stream concurrently used for sending data, causing the process to crash or potentially corrupt memory. The issue arises due to unsynchronized deletion of an RtmpChunkStream object while it is still in use by sender threads. This affects any application using the bRPC RTMP protocol implementation as a client or server with untrusted remote endpoints.
Apache bRPC versions prior to 1.18.0 contain an HTTP request/response smuggling vulnerability due to inconsistent parsing of HTTP/1.1 headers. This allows remote attackers to desynchronize the bRPC parser from front-end proxies or load balancers, enabling request smuggling and header injection such as forged Authorization or X-Forwarded-For headers. The issue arises from bRPC accepting obsolete or non-standard header forms that front-ends reject or interpret differently. The vulnerability is fixed in bRPC version 1.18.0.
Apache bRPC versions prior to 1.18.0 contain an uncontrolled recursion vulnerability in the mcpack2pb component. This flaw allows remote attackers to crash the server by sending deeply nested mcpack data. The parser recursively processes nested objects and arrays without a depth limit, leading to stack overflow and process crash. The issue affects bRPC servers handling nshead_mcpack, ubrpc, or public_pbrpc requests with recursive protobuf schemas. The vulnerability is fixed in version 1.18.0 by enforcing a maximum parsing depth of 128 levels.
BlueHammer (CVE-2026-33825) is a local privilege escalation chain targeting Windows Defender Antimalware Platform versions before 4.18.26030.3011. It requires initial code execution as a standard user and uses a series of legitimate Windows mechanisms to escalate privileges to NT AUTHORITY\SYSTEM. The exploit freezes the MsMpEng.exe process via CloudFilter manipulation and stages malicious update files. Laboratory tests demonstrated successful privilege escalation, recovery of domain-admin credentials from LSASS, and lateral movement using pass-the-hash techniques to compromise domain controllers. Exploitability depends on runtime factors such as pending signature updates, Defender state, filter drivers, VSS, and CloudFilter reachability. No known exploits are reported in the wild, and no patch information is provided.
A segmentation violation vulnerability exists in the check_media_profile function of the gpac software. This flaw can cause a crash when processing media profiles. The issue affects multiple specific versions of gpac. The vulnerability has a CVSS score of 5.5, indicating a medium severity impact primarily due to availability disruption.
pypdf2, a pure-Python PDF library, has a low severity vulnerability identified as CVE-2026-113786 affecting multiple specific versions. The vulnerability has a CVSS 4.0 base score of 2.3, indicating low impact. No public exploit or known active exploitation is reported. The vulnerability requires user interaction and has low attack complexity with no privileges required. No patch or remediation details are provided in the available data.
CVE-2026-98869 is a high-severity vulnerability in the Linux kernel's BPF verifier related to incorrect handling of zero extension for 32-bit operations on s390 architecture. The verifier's logic for zero extending the upper half of registers was broken due to removal of certain liveness tracking steps, potentially allowing injection of arbitrary values in upper register halves. This flaw was fixed by replacing the subregister definition logic with a static register liveness analysis that tracks upper and lower halves separately. The vulnerability affects Linux kernel version 6.18 and has been patched in a later commit.
CVE-2025-71438 is an out-of-bounds read vulnerability in the gpac software, specifically in the function gf_odf_ac4_cfg_dsi_v1 within the /odf/descriptors.c file. This flaw can cause an application crash or denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.5. It affects multiple specific versions of gpac as listed. There is no information about available patches or fixes in the provided data.
A high severity vulnerability (CVE-2026-96888) affecting multiple specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network exploitable issue with no required privileges or user interaction, causing a high impact on availability. This security update addresses the flaw in the affected Bind9 versions.
A high-severity security vulnerability (CVE-2026-94300) has been identified in specific versions of Bind9 DNS server software. The vulnerability has a CVSS 3.1 base score of 8.1, indicating a network attack vector with high impact on confidentiality, integrity, and availability. Multiple Ubuntu package versions of Bind9 are affected.
A high severity vulnerability (CVE-2026-19630) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to availability, with no confidentiality or integrity impact reported. Multiple specific Ubuntu package versions of Bind9 are affected.
CVE-2026-97313 is a reachable assertion vulnerability in ISC BIND 9 that can cause the server to exit unexpectedly, resulting in a denial of service. The issue occurs when a recursive BIND server receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0), under specific configuration conditions involving RPZ zones. This affects BIND 9 versions from 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, and certain S1 builds. The vulnerability requires the server to allow recursive queries and have at least two RPZ zones configured with differing "recursive-only" settings.