PT-2026-36336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb inherit dacl function trusts the num aces value from a parent directory's DACL xattr to determine the size of a heap allocation. An...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013488 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in...

CVE-2020-10665

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...

CVE-2025-64699

An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...

CVE-2025-64699

The electronic charting system SevenCs ORCA G2 version 2.0.1.35 (EC2007 Kernel v5.22) is vulnerable to an incorrect NULL DACL issue. The regService process, which runs with SYSTEM privileges , applies a Security Descriptor to a device object without an explicitly configured DACL. This flaw could ...

CVE-2025-64699

An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...

CVE-2025-64699: Incorrect Permission Assignment for Critical Resource

An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...

CVE-2025-12683: Improper Privilege Management

The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL and thus provides all users full permission over it; leading to potential Service Denial Of Service or Privilege escalationonly if chained...

EUVD-2015-3686

Malware in sbrugna...

EUVD-2018-6355

Malware in sbrugna...

EUVD-2019-9342

Malware in sbrugna...

EUVD-2019-17762

Malware in sbrugna...

EUVD-2020-3109

Malware in sbrugna...

EUVD-2007-2105

Malware in sbrugna...

EUVD-2007-0165

Malware in sbrugna...

EUVD-2025-11246

Malicious code in bioql PyPI...

EUVD-2024-26516

Malicious code in bioql PyPI...

EUVD-2023-46585

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-22039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix overflow in dacloffset bounds check The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypa...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fixed an overflow issue in the bounds check of the dacloffset field. The dacloffset field was originally defined as an int type and was used in an unchecked addition. This could lead to an overflow condition, thereby...