461830 matches found
PT-2026-90663
Bluetooth wallet vulnerability patched — CVE-2026-4412 allowed signature interception within 10 meters on certain hardware wallets. Affected devices required firmware update. Always keep your hardware wallet firmware current. BluetoothSecurity HardwareWallet CVE https://t.co/7FLXrdaIEb...
OPENSUSE-SU-2026:11769-1 zstd-jni-1.5.7.16-1.1 on GA media
These are all security issues fixed in the zstd-jni-1.5.7.16-1.1 package on the GA media of openSUSE Tumbleweed...
CLSA-2026-1789166016 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.7-tuxcare.9...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...
CLSA-2026-1789161501 TuxCare security update for validator (10 CVEs)
TuxCare rebuilt validator to address 10 CVEs. Fixed in 4.4.0-tuxcare.1...
CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
EUVD-2026-76664
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
CVE-2026-89595
CVE-2026-89595 is a race condition in the Linux kernel's fsnotify subsystem affecting both fanotify and inotify . When concurrent updates modify different marks on the same connector, a scanning thread can read a mark before a new event bit is added, while the updater skips recalculation, leaving...
CLSA-2026-1789155876 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 2.5.8-tuxcare.7...
CVE-2026-89499
CVE-2026-89499 affects the Linux kernel ring-buffer component. When the remote swap_reader_page callback returns -EBUSY (e.g., during an event storm on a small buffer), __rb_get_reader_page_from_remote() incorrectly continues with an unchanged reader ID and rearranges the local page list as thoug...
CVE-2023-35744
CVE-2023-35744 Actualización Crítica de Parches...
CLSA-2026-1789155659 TuxCare security update for DOMPurify (2 CVEs)
TuxCare rebuilt DOMPurify to address 2 CVEs. Fixed in 2.4.3-tuxcare.8...
CLSA-2026-1789155227 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...
CVE-2026-81912
Concrete CMS before 9.5.3 contains a Cross-Site Request Forgery (CSRF) flaw in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved selected group tree nodes without validating an action token, allowing a state-changing group move to be processed agains...
EUVD-2026-76243
Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm endpoint moved the selected group tree nodes without validating an action token, so a state-changing group move could be processed for an...