Lucene search
+L

128494 matches found

CVE
CVE
added 57 minutes ago3 views

CVE-2026-10680

The Classic BR/EDR L2CAP signaling handlers l2capbrconfreq and l2capbrconfrsp in subsys/bluetooth/host/classic/l2capbr.c validated the minimum command size against buf-len the bytes remaining in the whole received PDU instead of len the per-command data length from the L2CAP signaling header...

7.6CVSS
Exploits0References2
CVE
CVE
added 57 minutes ago4 views

CVE-2026-10678

The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctpi2cgpiotarget.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctpi2cgpiotargetwritereceived without validating the order or the receive buffer. In the affected versions the MCTPI2CGPIORXMSGADDR data...

8.1CVSS
Exploits0References2
CVE
CVE
added 3 hours ago5 views

CVE-2026-59147

Data::DisjointSet::Shared for Perl versions before 0.02 is vulnerable to out-of-bounds reads/writes in dsu_find due to an unvalidated parent index. The attach-time validator validates header and region against the file size but does not validate the contents of the parent array; dsu_find uses raw...

5.3AI score
Exploits0References2
Cvelist
Cvelist
added 3 hours ago5 views

CVE-2026-59144 Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq

Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elemsize in ringreadseq. The attach-time validator ringvalidateheader checks the capacity-overflow and totalsize consistency of the header but never caps elemsize against the destination size...

Exploits0References2
RedhatCVE
RedhatCVE
added 6 hours ago3 views

CVE-2026-64026

A flaw was found in the Linux kernel's rxrpc component. This vulnerability can lead to pagecache corruption when data packets are decrypted in-place after being transmitted locally via the splice system call. This issue stems from improper handling of packet sharing within the I/O thread,...

7.8CVSS5.4AI score0.00168EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 7 hours ago3 views

CVE-2026-63887

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

9.8CVSS5.7AI score0.0022EPSS
Exploits0References4
EUVD
EUVD
added 8 hours ago4 views

EUVD-2026-46266

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

4.3CVSS5.3AI score
Exploits0References2
RedHat Linux
RedHat Linux
added 9 hours ago3 views

glibc: glibc: Out-of-bounds write via TSIG record processing

A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG Transaction Signature records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could...

7.3CVSS5.8AI score0.00237EPSS
Exploits0References6
NVD
NVD
added 9 hours ago5 views

CVE-2026-16411

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153...

Exploits0References4
NVD
NVD
added 9 hours ago2 views

CVE-2026-16361

Memory safety bugs present in Firefox ESR 115.37 and Firefox ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38 and Firefox ESR...

9.8CVSS
Exploits0References3
EUVD
EUVD
added 9 hours ago2 views

EUVD-2026-46251

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox...

5.9AI score
Exploits0References5
CVE
CVE
added 9 hours ago7 views

CVE-2026-16412

Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...

5.9AI score
Exploits0References5
CVE
CVE
added 9 hours ago8 views

CVE-2026-16411

Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153...

5.9AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 11 hours ago3 views

CVE-2026-63928

A flaw was found in the Linux kernel's USB serial omninet driver. A malicious Universal Serial Bus USB device could exploit this by reporting a smaller maximum packet size than anticipated. This action would cause the system to allocate undersized data buffers, leading to memory corruption. Such...

7CVSS5.5AI score0.0021EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 15 hours ago6 views

CVE-2026-64035

A flaw was found in the Linux kernel's igc network driver. The igcfpeinitsmdframe function, responsible for initializing transmit TX buffer fields for Stream-based Data SMD frames, does not correctly set the buffer type. This can result in stale XDP eXpress Data Path or XSK AFXDP socket types...

9.8CVSS5.6AI score0.00166EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 15 hours ago6 views

CVE-2026-64117

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This use-after-free vulnerability arises from incorrect handling of fast-RX rate data during mesh processing. This can lead to memory corruption, which an attacker could potentially exploit to cause a system crash denial of service...

8.8CVSS5.4AI score0.00162EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 15 hours ago4 views

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

7.8CVSS7.1AI score0.00129EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 15 hours ago4 views

kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

A flaw was found in the Linux kernel's RDMA/mana component. A local user could trigger a kernel corruption by providing specific configurations through the user Application Programming Interface uAPI that cause an internal error. This issue arises when Work Queues WQs are specified to share the...

7.8CVSS7.1AI score0.00129EPSS
Exploits0References5
Rockylinux
Rockylinux
added 16 hours ago2 views

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

8.8CVSS8.2AI score0.72648EPSS
Exploits15
OSV
OSV
added 16 hours ago3 views

RLSA-2026:42088 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash CVE-2026-39872 webkitgtk: webkitgtk:...

8.8CVSS8.2AI score0.72648EPSS
Exploits15References24
Rows per page
Query Builder