63027 matches found
PT-2026-121259
NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login request contents, thereby obtaining users' plaintext account credentials and device information...
PT-2026-121487
OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3,the Apple MDM enrollment endpoint frontend/api-mdm.php verifies the signed enrollment-request plist with openssl pkcs7 verify..., PKCS7 NOVERIFY,...
CVE-2026-19947
The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmuxselectget and devmuxselectset. When CONFIGUSERSPACE is enabled, their user-mode verifiers zvrfydevmuxselectget and zvrfydevmuxselectset forwarded directly to the kernel implementations without...
CVE-2026-98640
A flaw was found in the Linux kernel's AMD Sensor Fusion Hub amdsfh driver. An attacker capable of attaching or emulating a crafted Peripheral Component Interconnect PCI device can cause a Denial of Service DoS through a system crash. This issue occurs because the driver fails to validate the PCI...
EUVD-2026-107488
The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmuxselectget and devmuxselectset. When CONFIGUSERSPACE is enabled, their user-mode verifiers zvrfydevmuxselectget and zvrfydevmuxselectset forwarded directly to the kernel implementations without...
CVE-2026-111184
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in...
CVE-2026-111184 NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in...
CVE-2026-111184
The NoMachine Device Service is vulnerable to a Local Privilege Escalation vulnerability due to incorrect permissions on a named pipe (CWE-732). A local attacker with the ability to execute low-privileged code can exploit this flaw to escalate privileges and execute arbitrary code in the context ...
CVE-2026-111184 NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in...
EUVD-2026-107396
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in...
SUSE CVE-2026-98549
In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in rtx queue tcpwritecollapsefence sets TCPSKBCBskb-eor = 1 on tcpwritequeuetailsk to prevent skbs queued after a switch to device encryption from being collapsed into earlier skbs. Th...
SUSE CVE-2026-98834
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtdotpnvmemadd unregisters the user device but leaves mtd-otpusernvmem set. On an error, the caller...
SUSE CVE-2026-98837
In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setupcard registers the input device, whose name and phys point into struct sndusbcaiaqdev, and then goes on to sndcardregister and sndusbcaiaqcontrolinit. If either fails...
CVE-2026-98620
A flaw was found in the Linux kernel's MediaTek Ethernet driver mtkethsoc. This issue allows a local attacker to cause a Denial of Service DoS by triggering a failure during the network device registration probe sequence. When registration fails, the driver's error cleanup path frees registered...
CLSA-2026-1768824748 kernel: Fix of 7 CVEs
fs/proc: fix uaf in procreaddirde CVE-2025-40271 - fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-2978 - Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp CVE-2023-53297 - net: sched: sfb: fix null pointer access issue when sfbinit fails CVE-2022-50356 - ALSA: usb-audio: Fix size...
CLSA-2026-1773832495 Fix of 132 CVEs
CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in fbcondosetfont CVE-2025-39967 - fbcon: Fix OOB access in font allocation CVE-2025-39967 CVE-2025-38702 - fbdev: fix potential buffer overflow in doregisterframebuffer...
DEBIAN-CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...
UBUNTU-CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...