WebKitGTK CVE-2026-78376

Heap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash

Remote code execution in Samba's printing subsystem allows remote attackers to inject arbitrary shell commands via craft

Arbitrary code execution in GIMP's PSD import plugin allows an attacker to run code in the context of the user who opens

Remote code execution and privilege escalation in HPLIP (HP Linux Imaging and Printing) affects the hpcups print filter

Out-of-bounds read in the GnuTLS DTLS handshake reassembly logic lets remote unauthenticated attackers trigger an intege

Local privilege escalation in Performance Co-Pilot (PCP) on Red Hat Enterprise Linux 6 through 10 and OpenShift Containe

Denial of service in Red Hat / 389 Directory Server (389-ds-base, versions since ~1.3.2/2013) allows an authenticated LD

Local-to-domain-wide root privilege escalation in SSSD's LDAP sudo provider allows an authenticated LDAP directory user

Heap buffer overflow in GStreamer's librfb (RFB/VNC client) allows a malicious VNC server to corrupt heap memory on a co

Code injection in the Perl DBI module as packaged for Red Hat Enterprise Linux allows a network-accessible, low-privileg

Confidential Active Directory attribute disclosure in Samba's Active Directory Domain Controller allows an authenticated

Privilege escalation in FreeIPA allows an attacker with high LDAP write privileges to create a rogue service principal t