MiracleLinux 9 : kernel-5.14.0-611.38.1.el9_7 (AXSA:2026-320:20)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-320:20 advisory. kernel: Linux kernel iouring: Local privilege escalation, information disclosure, or denial of service via use-after-free CVE-2025-38106 kernel:...

CVE-2025-38106

creationtimestamp| type| source ---|---|--- 2026-03-06 13:10:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff4w63em24 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0290/ 2026-03-20 13:05:28+00:00| seen|...

RHEL 10 : kernel (RHSA-2026:3579)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3579 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: xHCI driver...

RHEL 9 : kernel (RHSA-2026:3088)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3088 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: mpi3mr: Synchronous acce...

Ubuntu: Security Advisory (USN-7769-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-38106 io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2022-38106

This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function...

CVE-2021-38106

UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-38106

CVE-2024-38106 is a Windows kernel local privilege escalation vulnerability. The Windows kernel race condition allows a local attacker with low privileges to gain SYSTEM-level access and execute code with high impact. Microsoft lists this CVE as being actively exploited in the wild. The advisory ...

CVE-2024-38106 Windows Kernel Elevation of Privilege Vulnerability

...

VulnCheck KEV: CVE-2024-38106

Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition...

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-38106

SolarWinds Serv-U Web Client (remote) 15.3.0–15.3.1 is affected by a cross-site scripting vulnerability in the directory creation function. Root cause details vary by source, but public documents consistently identify the web client as the affected surface and note an XSS risk. A fix is available...

CVE-2022-38106 Cross-Site Scripting Vulnerability in Serv-U Web Client

This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function...

SolarWinds Serv-U 15.3.0 < 15.3.2 (deprecated)

The version of SolarWinds Serv-U installed on the remote host is prior to 15.3.2. It is, therefore, affected by a vulnerability as referenced in the serv-u1532 advisory. - This vulnerability happens in the web client of Serv-U 15.3.1 and earlier release version. When the payload is entered in the...

CVE-2021-38106

Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read in UAX200.dll when parsing a crafted PPT file. An unauthenticated attacker could access memory in the context of the current user, with exploitation requiring user interaction (victim opens a malicious file). The condition i...