18782 matches found
USN-8172-1: kvmtool vulnerabilities
It was discovered that kvmtool did not properly manage memory under certain circumstances. A malicious guest attacker could use this issue to cause kvmtool to crash, leading to a denial of service, or possibly execute arbitrary code on the host system. CVE-2021-45464 It was discovered that kvmtoo...
EUVD-2026-21844
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34863
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34863
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34863
Huawei HarmonyOS is affected by CVE-2026-34863, describing an out-of-bounds write in the file system that can impact availability. The vulnerability is documented across multiple feeds (NVD, CNVD, EUVD, CIRCL, etc.), indicating a file-system level flaw likely exploitable with local access (attack...
CVE-2026-34863
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34863
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei HarmonyOS file system, which can be exploited by an attacker to cause availability to be compromise...
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation...
PT-2026-32255
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
VulnCheck KEV: CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Ubuntu 20.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8162-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8162-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
SUSE CVE-2024-56433
shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...
GHSA-VW86-C94W-V3X4 SiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`
Summary The endpoint /api/av/removeUnusedAttributeView is vulnerable to a path traversal CWE-22 that allows an attacker to delete arbitrary .json files on the server. The issue arises because user-controlled input id is directly used in filesystem path construction without validation or...
PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
Summary readskillfile in skilltools.py allows reading arbitrary files from the filesystem by accepting an unrestricted skillpath parameter. Unlike filetools.readfile which enforces workspace boundary confinement, and unlike runskillscript which requires critical-level approval, readskillfile has...
apparmor: fix race between freeing data and fs accessing it
...
Sleuth Kit APFS Keybag Parser Out-of-Bounds Read
...
CLSA-2026-1775779453 Fix of 68 CVEs
CVE-2025-39743 - jfs: truncate good inode pages when hard link is 0 CVE-2025-39743 CVE-2025-39685 - comedi: pcl726: Prevent invalid irq number CVE-2025-39685 CVE-2025-38713 - hfsplus: fix slab-out-of-bounds read in hfsplusuni2asc CVE-2025-38713 CVE-2025-38699 - scsi: bfa: Double-free fix...
SUSE CVE-2026-40025
The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the APFS filesystem keybag parser where the wrappedkeyparser class follows attacker-controlled length fields without bounds checking, causing heap reads past the allocated buffer. An attacker can craft a malicious APFS...
USN-8145-4 linux-hwe vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...