61804 matches found
x86: DMs may cause mem leak by IRQ binding
ISSUE DESCRIPTION When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that...
UBUNTU-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-62649
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...
SUSE-SU-2026:23526-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
CareCam Pro IP Cameras
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to take full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...
PT-2026-95575
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
PT-2026-87043
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
PT-2026-95346
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
CVE-2026-69377: Missing Authorization
Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
Linux Distros Unpatched Vulnerability : CVE-2026-79602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. CVE-2026-79602 Note that Nessus relies on the presence...
PT-2026-87674
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87268
Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to disclose information locally. This issue...
PT-2026-95347
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
CVE-2026-70577: Use After Free
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
PT-2026-87722
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87766
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87584
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87664
Name of the Vulnerable Software and Affected Versions Windows Device Association Broker service affected versions not specified Description A use-after-free condition in the Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. Use-after-free is a...