Floating Point Value Injection (FPVI) Variant in AMD CPUs

Summary Researchers shared with AMD a report titled “TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities.” The researchers' paper introduced a Floating-Point Value Injection FPVI variant, which could allow an attacker with a deep understanding of...

SUSE CVE-2026-26314

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem is resolved in the v1.16.9 and v1.17.0 releases of Geth...

Linux Distros Unpatched Vulnerability : CVE-2021-26314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with...

CVE-2024-26314

creationtimestamp| type| source ---|---|--- 2025-03-21 21:22:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8448...

CVE-2023-26314

creationtimestamp| type| source ---|---|--- 2025-03-18 16:51:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7938...

CVE-2024-26314

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code...

CVE-2024-26314

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code...

[SECURITY] [DLA 3343-1] mono security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3343-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

Debian dla-3343 : ca-certificates-mono - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3343 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3343-1 [email protected] https://www.debian.org/lts/security/...

CVE-2023-26314

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter...

CVE-2023-26314

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter...

CVE-2023-26314

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter...

CVE-2023-26314

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter...

CVE-2022-26314

creationtimestamp| type| source ---|---|--- 2022-06-04 05:59:39+00:00| published-proof-of-concept| https://t.me/ptswarm/129 2022-06-25 14:45:42+00:00| published-proof-of-concept| https://t.me/zerodayuz/167...

CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...

CVE-2022-26314

CVE-2022-26314 affects the Mendix Forgot Password Appstore module: affected versions are Mendix Forgot Password Appstore v3.3.0–v3.5.1 and Mendix 7 compatible versions prior to v3.2.2. The root cause is improper restriction of excessive authentication attempts, enabling unauthenticated brute-forc...

Fedora: Security Advisory for xen (FEDORA-2021-993693c914)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2021-26314

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage...

CVE-2021-26314

CVE-2021-26314 concerns Potential floating point value injection in all supported CPU products when combined with software vulnerabilities enabling speculative execution with incorrect FP results, potentially allowing data leakage through FPVI. The AMD bulletin AMD-SB-1003 explicitly covers this ...

Speculative Code Store Bypass (SCSB) and Floating-Point Value Injection (FPVI) Advisory - Lenovo Support US

No description provided...