EDAC/altera: Fix use-after-free in error paths
Advisory content revised
CVE-2026-98932
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
2291 source records · 1654 groupsSecurityFront End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment
Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment
Newly collected advisory
CVE-2026-87835
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
Newly collected advisory
CVE-2026-113673
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute
GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute
Newly collected advisory
CVE-2026-113493
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR
GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR
Newly collected advisory
CVE-2026-113489
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal
GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal
Newly collected advisory
CVE-2026-113491
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification
GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification
Newly collected advisory
CVE-2026-113674
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint
Newly collected advisory
CVE-2026-113490
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
Newly collected advisory
CVE-2026-113492
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
Newly collected advisory
CVE-2026-108013
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHID: alps: fix use-after-free on input2 registration failure
HID: alps: fix use-after-free on input2 registration failure
Advisory content revised
CVE-2026-98501
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: steam: Rearrange teardown sequence
HID: steam: Rearrange teardown sequence
Advisory content revised
CVE-2026-98945
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: steam: Refactor registration
HID: steam: Refactor registration
Advisory content revised
CVE-2026-98944
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
Advisory content revised
CVE-2026-98499
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityIDOR: User reads and modifies findings from other people's projects
IDOR: User reads and modifies findings from other people's projects
Newly collected advisory
CVE-2026-115998
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityInternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
Newly collected advisory
CVE-2026-115802
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKVM: SEV: Do cache maintenance on the source VM during intra-host migration
KVM: SEV: Do cache maintenance on the source VM during intra-host migration
Advisory content revised
CVE-2026-98471
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: Fix AArch32 DBGBXVR<n> handling
KVM: arm64: Fix AArch32 DBGBXVR<n> handling
Advisory content revised
CVE-2026-98469
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: Transfer the hyp stack pages out of the host stage-2
KVM: arm64: Transfer the hyp stack pages out of the host stage-2
Advisory content revised
CVE-2026-98466
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
Advisory content revised
CVE-2026-98440
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: nv: Fix life cycle of the nested_mmus array
KVM: arm64: nv: Fix life cycle of the nested_mmus array
Advisory content revised
CVE-2026-98927
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: x86: Use active memslots for the per-vCPU MMIO cache
KVM: x86: Use active memslots for the per-vCPU MMIO cache
Advisory content revised
CVE-2026-99082
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
Newly collected advisory
CVE-2026-107907
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
Newly collected advisory
CVE-2026-115929
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.