CVE-2026-41338

OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in applypatch, remove, and mkdir operations to manipulate files between validation and execution...

EUVD-2025-41338

Malicious code in citra-getas73-riris npm...

CVE-2025-41338

creationtimestamp| type| source ---|---|--- 2025-11-04 14:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sq5wyz6z2s 2025-11-04 15:35:39+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4sue5gjkxm2...

CVE-2023-41338

Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properly restrict access to localhost. This issue impacts users of our project who rely on the ctx.IsFromLocal method to restrict access to localhost requests. If exploited, it could...

CVE-2024-41338

CVE-2024-41338 describes a NULL pointer dereference in DrayTek Vigor devices that allows a Denial of Service (DoS) when handling crafted DHCP requests. Affected devices and minimum vulnerable/patch versions include: Vigor 165/166 prior to 4.2.6; 2620/LTE200 prior to 3.9.8.8; 2860/2925 prior to 3....

CVE-2024-41338

A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to...

CVE-2024-41338

A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to...

CVE-2023-41338

creationtimestamp| type| source ---|---|--- 2023-09-08 22:21:41+00:00| seen| https://t.me/cibsecurity/70163...

CVE-2021-41338

creationtimestamp| type| source ---|---|--- 2021-10-13 07:32:34+00:00| seen| https://t.me/cibsecurity/30485 2021-10-13 15:52:05+00:00| seen| https://t.me/truesecator/2209 2021-10-14 16:21:20+00:00| exploited| Telegram/0N8hYoIZNVMzLz29O1HKlSbPUHPxGySFoEhQpN9rXpV6UQ...

Update Your Windows PCs Immediately to Patch New 0-Day Under Active Attack

Microsoft on Tuesday rolled out security patches to contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an actively exploited privilege escalation vulnerability that could be exploited in conjunction with remote code execution bugs to take control ov...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-41338

Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...

CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

...

CVE-2021-41338 Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability

...

CVE-2021-41338

Technical details about CVE-2021-41338 (Windows AppContainer Firewall Rules Security Feature Bypass) are not provided in the connected documents. Monitor for updates.

KB5006699: Windows Server 2022 Security Update (October 2021)

The remote Windows host is missing security update 5006699. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

KB5006674: Windows 11 Security Update (October 2021)

The remote Windows host is missing security update 5006674. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...