CVE-2026-23330

Summary: CVE-2026-23330 affects the Linux kernel NFC/NCI subsystem. The issue arises in nci_close_device() where pending data exchanges may not be completed before closing, allowing a leaking unreferenced socket object (example: 0xff1100000f435000, size 2048) and associated references. This could...

CVE-2026-23330 nfc: nci: complete pending data exchange on device close

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23330 nfc: nci: complete pending data exchange on device close

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

tar-rs incorrectly ignores PAX size headers if header size is nonzero

...

CVE-2026-2343

creationtimestamp| type| source ---|---|--- 2026-03-25 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116288640066659181 2026-03-25 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhukz3ljse2i 2026-03-25 10:05:16+00:00| seen|...

CVE-2026-28859

creationtimestamp| type| source ---|---|--- 2026-03-25 07:28:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116288631079391237 2026-03-27 04:46:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116299318674903445...

CVE-2026-28858

creationtimestamp| type| source ---|---|--- 2026-03-25 06:20:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116288365225347899 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/ 2026-04-06 18:00:04+00:00| seen| https://t.me/GithubRedTeam/79...

PT-2026-27788

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco Secure Firewall Adaptive Security Appliance ASA Software affected versions not specified Cisco Secure Firewall Threat Defense FTD...

Support Statement — Exchange Web Services (EWS) Deprecation

Challenge Microsoft has announced the deprecation of Exchange Web Services EWS in Exchange Online, with the initial phase-out target of October 1, 2026. Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365 currently leverage EWS for Exchange Online backup functionality. Note: Thi...

Cisco多款产品 安全漏洞

Cisco IOS, etc. are products of the American company Cisco. Cisco IOS is an operating system developed for their network devices. Cisco Secure Firewall Adaptive Security Appliance is a enterprise-level firewall software. Cisco IOS XE Software is a network operating system. Several Cisco products...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from incomplete data exchange during the shutdown of devices, potentially leading to memory leaks...

EUVD-2026-15003

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-24141

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-20687

creationtimestamp| type| source ---|---|--- 2026-03-24 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77047 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-25 03:00:31+00:00| seen|...

CVE-2025-33244

creationtimestamp| type| source ---|---|--- 2026-03-24 16:07:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116285009080786075 2026-03-24 22:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlakxhs62p 2026-03-24 22:06:51+00:00| seen|...

CLSA-2026-1774366569 Fix CVE(s): CVE-2026-3497

SECURITY UPDATE: pre-auth crash via GSSAPI key exchange - debian/patches/CVE-2026-3497.patch: replace sshpktdisconnect with sshpacketdisconnect and initialize gssbufferdesc variables in kexgssc.c, kexgsss.c. - CVE-2026-3497...

CVE-2026-4676

creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260324 2026-03-24 01:46:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116281623994038194 2026-03-24 02:17:34+00:00| seen|...

CVE-2026-4678

creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260324 2026-03-24 02:00:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116281679016564532 2026-03-24 02:24:21+00:00| seen|...

EUVD-2026-14477

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...