7670 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is...
TencentOS Server 4: gstreamer1-plugins-bad-free (TSSA-2026:0849)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0849 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-56090
Dell ObjectScale versions before 4.3.0.1 have an Uncontrolled Search Path Element flaw exploitable by a low-privileged local attacker to elevate privileges; no exploitation or in-the-wild activity is documented in the provided documents.
CVE-2026-56090
Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-56090
Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-65914
A flaw was found in DOMPurify. This vulnerability, a type of Cross-Site Scripting XSS, occurs when HTML that has been sanitized is reinserted into specific parsing contexts using innerHTML with certain HTML elements like script or iframe. An attacker can craft malicious input that, during...
CVE-2026-56090: Uncontrolled Search Path Element
Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-74336
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...
CVE-2026-72353
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfsattrfallocate allocates holes and delayed allocations inside initialized size by looking up the current runlist element under ni-runlist.lock. The returned struct...
AZL-96594 CVE-2026-72320 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
CVE-2026-72353
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfsattrfallocate allocates holes and delayed allocations inside initialized size by looking up the current runlist element under ni-runlist.lock. The returned struct...
CVE-2026-72320
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
UBUNTU-CVE-2026-72354
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfswritemftblock maps each $MFT record through the $MFT data runlist. For sub-folio clusters it looks up a struct runlistelement under ni-runlist.lock, drops the loc...
EUVD-2026-59219
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
CVE-2026-72320
CVE-2026-72320 concerns the Linux kernel netfilter implementation for nft_lookup. The issue arises in how inverted lookups (NFT_LOOKUP_F_INV) interact with the catchall element in interval sets, potentially causing an incorrect verdict. The documented fix folds the catchall lookup into ext before...
CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
PT-2026-72772
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ieee80211 s1g check tim function when parsing the S1G Partial Virtual Bitmap PVB of a received Traffic Indication Map TIM element. The issue occurs...
CVE-2026-74336: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...
PT-2026-72508
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter component where the nft lookup eval function incorrectly handles catchall elements during inverted lookups NFT LOOKUP F INV. The function determines if a...