12717 matches found
dracut security update
107-8.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...
kernel security update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
CVE-2026-64167
In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel khofillkimage unconditionally populates the kimage with KHO metadata for every kexec image type. When the image is a crash kernel, this can be problematic as the crash kernel can run in a small...
PT-2026-61259
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the parport subsystem where port devices are registered before they are fully initialized. This allows client drivers, such as lp, to attach to ports that are...
Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml
yaml-payload A SnakeYAML deserialization exploit payload for...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Mitel 6800 / 6900 / 6900w Series SIP Phone Argument Injection Vulnerability (CVE-2024-41710)
According to its self-reported version, the remote Mitel IP Phone running SIP Software is affected by an argument injection vulnerability: - A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, through R6.4.0.HF1 R6.4.0.136 could allow an authenticated attacker with...
[SECURITY] [DLA 4685-1] grub2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4685-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 15, 2026 https://wiki.debian.org/LTS -...
vulnerable-web-app
vulnerable-web-app ⚠️ Intentionally vulnerable. A runna...
The vulnerability of the Micrometer library in the Spring Boot web application framework allows a attacker to cause a service failure.
The vulnerability of the Micrometer library in the Spring Boot web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP requests...
The vulnerability of the Micrometer library in the Spring Boot web application framework allows a attacker to cause a service failure.
The vulnerability of the Micrometer library in the Spring Boot web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted gRPC requests...
EUVD-2026-43801
Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2025-210463
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2026-58638
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...
CVE-2026-49783
Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-44315
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-58638
CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...
CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
...
CVE-2026-49783
CVE-2026-49783 is a Windows Secure Boot issue described as an improperly implemented security check for the standard, enabling a local attacker with low privileges to bypass a security feature. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, no user interac...