CVE-2026-48183 is a critical vulnerability in the Samsung Semiconductor Exynos 1480 chipset involving improper permission handling during buffer operations. This flaw allows untrusted applications to create memory mappings with inappropriate permissions, potentially leading to high impact on integrity and availability. A fix was released in October 2026.
CVE-2025-10149 is a vulnerability in WSO2 Identity Server as Key Manager where the SCIM endpoint insufficiently validates authorization for federated users when local and federated users share the same username. This flaw allows a malicious federated user to perform arbitrary operations on local user accounts, potentially leading to account takeover. The issue affects multiple versions prior to specific fixed releases. The vulnerability has a high severity rating with a CVSS score of 8.2.
CVE-2026-47599 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Linux. It involves improper preservation of memory access permissions during DMA mapping in the open-source kernel module. This flaw allows an unprivileged local user to potentially execute code, escalate privileges, cause denial of service, disclose information, or tamper with data.
CVE-2026-47595 is a high-severity vulnerability in the NVIDIA GeForce GPU Display Driver for Linux. It involves improper preservation of memory permissions in the kernel mode layer, which allows an unprivileged user to write to read-only memory. This flaw can lead to code execution, privilege escalation, denial of service, information disclosure, and data tampering.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVE-2026-82964 is a high-severity vulnerability in Gen Digital's Avast security products affecting versions prior to 26.8. It involves improper preservation of permissions in the Avast sandbox minifilter driver on Windows, allowing a local low-privileged attacker inside the sandbox to escape file isolation and escalate privileges to SYSTEM. The flaw arises because the driver fails to correctly apply the original security descriptor when virtualizing files, resulting in permissive permissions on virtualized copies. This enables a sandboxed process to rewrite security descriptors, access sensitive files like the SAM database, extract NTLM password hashes, and execute code with SYSTEM privileges.
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this may allow a local actor to obtain the privileges of the extracting process. This vulnerability (CVE-2026-88922) is fixed in go-getter 1.8.9 and 2.2.4.
CVE-2026-58510 is a medium severity vulnerability in Gitea Open Source Git Server affecting versions up to 1.26.4. The issue involves a failure to apply a fix (GHSA-8fwc-qjw5-rvgp) to the API EditRepo path, resulting in stale repository watches persisting when a repository's visibility changes from public to private. This can lead to unintended information disclosure due to retained watch states.
CVE-2025-14779 is a vulnerability in WSO2 Identity Server's Secret Type Management REST API where the deletion of a secret type does not properly enforce organizational boundaries. This flaw allows the deletion cascade to remove secrets across all organizations, not just the intended one. Exploitation requires delete permissions on the Secret Type Management REST API, which are typically restricted to administrators. The vulnerability can lead to unintended secret deletions, causing configuration failures, service interruptions, and denial-of-service conditions. The CVSS score is 3.8, indicating a low severity impact.
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.
Security Fix(es):
* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
When oxenstored is tearing a domain down, the node data is cleaned up
but the usage counts are leaked.
When the domain ID is eventually reused, the new domain can create fewer
nodes before beeing deemed to be over quota.
Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite host files exposed as FilePerms::READ through wasip1, wasip2, or wasip3 filesystem interfaces. This issue is fixed in versions 24.0.11, 36.0.12, 45.0.3, and 46.0.1.
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.
A missing clean-up in the legacy Project Role Template Binding (PRTB)
reconciler in Rancher versions 2.13.0 up to 2.13.7 and 2.14.0 up to 2.14.3 allowed users to retain unauthorized Pod Security
Admission (PSA) permissions after an administrator removes those
permissions from a RoleTemplate.
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permission can escalate their own privileges to admin by sending a PATCH request to /api/v1/users/{id} with permissions[admin]=1. The API controller only strips the superuser key from the permissions array, allowing admin and all other permission keys to be set by any user who can update users. This vulnerability is fixed in 8.4.1.
A vulnerability exists in the NVIDIA Display Driver for Linux in the kernel mode layer handler that improperly preserves permissions. Exploiting this flaw could allow a local user with limited privileges to cause denial of service, escalate privileges, disclose information, tamper with data, or execute arbitrary code. This affects all driver versions prior to 595.71.05. The vulnerability has a high severity score of 7.8 but no official patch or remediation guidance has been confirmed yet.