Lucene search
+L

3854 matches found

NVD
NVD
added 2026/05/08 2:16 p.m.34 views

CVE-2026-43322

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

8.8CVSS0.00219EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/05/08 2:16 p.m.13 views

CVE-2026-43322

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

8.8CVSS6.5AI score0.00219EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/08 1:31 p.m.4 views

CVE-2026-43322 Bluetooth: hci_sync: Fix UAF in le_read_features_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

8.8CVSS6.6AI score0.00219EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/08 1:31 p.m.58 views

CVE-2026-43322 Bluetooth: hci_sync: Fix UAF in le_read_features_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

8.8CVSS0.00219EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:31 p.m.6 views

CVE-2026-43322

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

5.7AI score0.00219EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/05/08 1:31 p.m.26 views

CVE-2026-43322

CVE-2026-43322 is a Linux kernel vulnerability in Bluetooth HCI sync handling (le_read_features_complete). The issue is a use-after-free (UAF) caused by freeing hci_conn after le_read_features_complete has been initiated but before it completes, allowing hci_cmd_sync_dequeue to fail to prevent th...

8.8CVSS5.8AI score0.00219EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 1:31 p.m.12 views

CVE-2026-43322

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in lereadfeaturescomplete This fixes the following backtrace caused by hciconn being freed before lereadfeaturescomplete but after hcilereadremotefeaturessync so hciconndel - hcicmdsyncdequeue is not...

8.8CVSS5.7AI score0.00219EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.15 views

PT-2026-38973

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth component of the Linux kernel. The problem occurs in the le read features complete function when hci conn is freed after hci le read...

8.8CVSS7.6AI score0.00219EPSS
SaveExploits0References29
EUVD
EUVD
added 2026/05/07 6:30 p.m.26 views

EUVD-2026-28398

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated or weakly authenticated access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates...

7.2CVSS5.7AI score0.00577EPSS
SaveExploits1References3
NVD
NVD
added 2026/05/07 5:15 p.m.18 views

CVE-2026-7413

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated or weakly authenticated access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates...

9.8CVSS0.00577EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/05/07 4:9 p.m.7 views

CVE-2026-7413

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated or weakly authenticated access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates...

7.2CVSS5.7AI score0.00577EPSS
SaveExploits1References3
Malwarebytes
Malwarebytes
added 2026/05/07 10:21 a.m.20 views

If a fake moustache can fool age checks, is the Online Safety Act working?

A report based on a survey by the UK’s Internet Matters shows that much of the responsibility for managing the online safety of children still falls on families. The Online Safety Act came into effect in July, 2025, and the report explores what has changed in the online lives of UK families since...

5.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/05/07 2:18 a.m.24 views

SUSE CVE-2026-43094

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 "ixgbevf: fix mailbox API compatibility by negotiating supported features" added the .negotiatefeatures callback to ixgbemacoperations and populat...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2026/05/07 12:0 a.m.136 views

Hotfix update for Exchange Server Subscription Edition RTM HU6: May 7, 2026 (KB5081755)

None None...

6.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/05/07 12:0 a.m.13 views

Beyond the Wrapper: Identifying Artifact Reliance in Static Malware Classifiers Using TRUSTEE

Modern cybersecurity relies heavily on static machine-learning-based malware classifiers. However, transformations such as packing and other non-semantic modifications applied to executable files limit their reliability. Malware classifiers often learn these unnecessary artifacts rather than the...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/05/07 12:0 a.m.11 views

TUANDROMD-X: Advanced Entropy and Visual Analytics Dataset for Enhanced Malware Detection and Classification

Malware and malware-based attacks are becoming more prevalent and complex. Attackers regularly come up with new techniques that have the ability to evade conventional and signature-based malware defense. In order to address such threats, there is an increasing demand for advanced and better defen...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2026/05/06 12:30 p.m.8 views

EUVD-2026-27598

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 "ixgbevf: fix mailbox API compatibility by negotiating supported features" added the .negotiatefeatures callback to ixgbemacoperations and populat...

5.8AI score0.00123EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/06 10:16 a.m.24 views

CVE-2026-43094

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 "ixgbevf: fix mailbox API compatibility by negotiating supported features" added the .negotiatefeatures callback to ixgbemacoperations and populat...

5.5CVSS0.00123EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/06 7:40 a.m.7 views

CVE-2026-43094

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 "ixgbevf: fix mailbox API compatibility by negotiating supported features" added the .negotiatefeatures callback to ixgbemacoperations and populat...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/05/06 7:40 a.m.27 views

CVE-2026-43094

CVE-2026-43094 affects the Linux kernel ixgbevf driver on Hyper-V VMs. The root cause is a missing negotiate_features callback in the Hyper-V mac_ops table, causing ixgbevf_negotiate_api() to dereference a NULL hw->mac.ops.negotiate_features() during feature negotiation. This can lead to a NUL...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder