Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

Multiple high‑impact vulnerabilities and active malware campaigns were reported across open‑source and commercial software. Notable disclosures include an out‑of‑bounds read in Ollama (CVE-2026-7482, “Bleeding Llama”, CVSS 9.1) that can leak process memory and may affect ~300,000 servers; a PAN-OS buffer‑overflow RCE under active exploitation (CVE-2026-0300, CVSS ~9.3); an Apache HTTP/2 double‑free (CVE-2026-23918) with potential RCE; Ivanti EPMM RCE exploited in the wild (CVE-2026-6973); and cPanel/WHM fixes (including CVE-2026-29201). Additional threats include a new Linux LPE (“Dirty Frag,”