CVE-2026-98223 low kernel: mm: filemap: retain mapped dropbehind folios since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98208 low kernel: mmc: sdio_uart: fix xmit_fifo leak when the port table is full since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98203 low kernel: Input: soc_button_array - check btns_desc->package.count since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98202 low kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98191 low kernel: wifi: wlcore: release runtime PM ref on regdomain config failure since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98182 low kernel: wifi: mac80211: refuse to make a monitor active when it has no queue since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98179 low kernel: drm/amdgpu: fix rmmio iounmap skipped on device removal since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98178 low kernel: drm/amdgpu: Skip KFD mapping clear before initialization since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98177 low kernel: drm/amdkfd: Avoid integer underflow in EOP ring size calculation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98176 low kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 GHSA-6688-9rhm-gjv2 low DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105752 low vllm: vLLM: Cross-tenant information disclosure via missing cache salt in tool continuations since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105748 low docling: Docling: Information disclosure via local image file references since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105683 low Ghost: Path Traversal Vulnerability in Ghost ImageSize Service since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105682 low Ghost: Server-Side Request Forgery in Webhook Trigger since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105652 low Ghost: Password Hash Ordering Disclosure in Ghost Admin API since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-105326 low cups: cups: argument injection in mailto notifier via notify-recipient-uri since at least 24 Oct 2026 07:11 UTC build 5 Oct 2026 CVE-2026-104994 low github.com/aquasecurity/trivy: Trivy: Information disclosure via directory traversal in Terraform filesystem functions since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 GHSA-6g2r-675j-hx59 low xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-104415 low Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API since at least 24 Oct 2026 07:11 UTC build 2 Oct 2026 CVE-2026-56449 low httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-48005 low httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-47360 low httpd: httpd: Information disclosure via session cookie leakage during internal redirects since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-42356 low httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 GHSA-wf3x-273g-mvxv low devalue: Sparse arrays emitted by uneval cause eager allocation when evaluated since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 CVE-2026-94220 low Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin since at least 24 Oct 2026 07:11 UTC build 1 Oct 2026 GHSA-p98j-92pf-mc4p low DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-103012 low claude-code: claude-code: Security policy bypass via improper credential prioritization since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102587 low Moodle: user list filters bypass profile field visibility since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102583 low Moodle: incorrect capability check in ai generate image web service since at least 24 Oct 2026 07:11 UTC build 30 Sep 2026 CVE-2026-102330 low chromium-browser: chromium-browser: Incorrect authorization in SiteIsolation since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102314 low chromium-browser: chromium-browser: UI misrepresentation in TabStrip since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102825 low russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102822 low russh: russh: Denial of Service via improper MAC negotiation with block ciphers since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95385 low chromium-browser: Inappropriate implementation in PlatformIntegration since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95380 low chromium-browser: Type confusion in V8 since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95368 low chromium-browser: Incorrect authorization in DevTools since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95367 low chromium-browser: Information leak in DataTransfer since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95364 low chromium-browser: Improper input validation in Passwords since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95361 low chromium-browser: Confused deputy in DevTools since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95352 low chromium-browser: Incorrect authorization in DevTools since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95342 low chromium-browser: Missing authorization in V8 since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95340 low chromium-browser: Incorrect authorization in PictureInPicture since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95334 low chromium-browser: Incorrect reference resolution in WebProtect since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95328 low chromium-browser: Confused deputy in Mobile since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95327 low chromium-browser: Information leak in Networking since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95326 low chromium-browser: Incomplete cleanup in Bluetooth since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95319 low chromium-browser: Use after free in Printing since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95316 low chromium-browser: Unchecked return value in Performance since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95309 low chromium-browser: UI misrepresentation in Mobile since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 