CVE-2026-111382 high freerdp: freerdp: Arbitrary code execution via crafted display frames since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-111381 high freerdp: freerdp: Arbitrary code execution via crafted persistent cache file since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-111380 high freerdp: FreeRDP: Arbitrary code execution via integer overflow in audio input buffer calculation since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-111379 high freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-111378 high freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-111373 high freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping since at least 24 Oct 2026 07:11 UTC build 16 Oct 2026 CVE-2026-110922 high chromium-browser: Use after free in Prerender since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110921 high chromium-browser: Use after free in V8 since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110920 high chromium-browser: Memory corruption in V8 since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110919 high chromium-browser: Use after free in V8 since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110918 high chromium-browser: Memory corruption in Core since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110917 high chromium-browser: Memory corruption in SVG since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110913 high chromium-browser: Memory corruption in DOM since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109468 high dotnet: ASP.NET Core: Denial of Service via unthrottled resource allocation since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-97370 high Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-87029 high undici: undici: Denial of Service via unhandled exception in decompress interceptor since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-87018 high undici: undici: Denial of Service via TLS renegotiation with mismatched certificate since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-111125 high cfitsio: cfitsio: Denial of Service via heap-based out-of-bounds read in HCOMPRESS tile decoder since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-111124 high cfitsio: cfitsio: Denial of Service via out-of-bounds read during image decompression since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109932 high undici: undici: Denial of Service via unbounded WebSocket PONG buffering since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109924 high undici: undici: Denial of Service via memory exhaustion in EventSource client since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109869 high undici: undici: Denial of Service via unhandled stream error on excessive content encodings since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109841 high undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-108334 high github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: Crafted HTTPRoute match values can bypass Gateway policy overrides since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-104827 high react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-104150 high http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-102946 high joserfc: joserfc: Signature verification bypass via empty signatures array since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-55453 high cups: cups: Arbitrary code execution via newline injection in printer status messages since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-85634 high wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100409 high OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100354 high github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100353 high github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-97394 high github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in openapi3filter since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-92982 high ansible-operator-plugins: Ansible Operator Plugins: Arbitrary Code Execution via Jinja2 Template Injection since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100352 high github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100351 high github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-100349 high github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-9703 high Viewer role can create, modify and delete Loki alerting rules since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-104024 high peazip: PeaZip: Arbitrary command execution via incomplete dangerous file extension list since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-99999 high kernel: ipv4: validate checksum_start before completing checksum since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-104025 high peazip: PeaZip: Arbitrary code execution via path traversal in archive preview since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-18660 high org.eclipse.jetty/jetty-server: org.eclipse.jetty/jetty-proxy: Eclipse Jetty: Access control bypass via case-sensitive host filtering since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-77711 high org.eclipse.jetty/jetty-client: jetty-client: Information disclosure via improper proxy authentication handling since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-109855 high undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2024-22031 high Rancher users who can create Projects can gain access to arbitrary projects since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2023-32198 high Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110869 high nodemailer: nodemailer: Denial of Service via regular expression backtracking in SMTP authentication parsing since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110865 high renovate: Renovate: HTTP header injection via shared configuration presets since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110859 high GitPython: GitPython: Arbitrary file read via argument injection in branch checkout since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110857 high GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 