Apple macOS security vulnerabilities

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.1 had a security vulnerability due to insufficient checks, which could allow malicious applications to modify the protected portion of the file system...

USN-8143-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - UDF file system; - NFC subsystem; -...

CLEANSTART-2026-XU81487 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 4.13.0-r0, 4.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Btrfs zlib Buffer Overflow DoS

The vulnerability of the zlibcompressfolios function in the fs/btrfs/zlib.c module of the Btrfs file system support in Linux kernel affects the handling of operations that involve moving data out of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Network File System Buffer Overflow DoS

The vulnerability of the netfsreadtopagecache function in the fs/netfs/bufferedread.c module of the Linux kernel’s network file system support mechanism is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

EROFS Heap Buffer Overflow DoS

The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between data release and access to the file system data. This vulnerability may...

Linux kernel NFS DoS

The vulnerability of the nfsd4encodefattr4 function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux debugfs file removed buffer overflow DoS

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Medium: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2 to change attributes class CVE-2025-71239 In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsexpand inodedata function in the fs/f2fs/file.c module of the F2FS file system in the Linux operating system is related to the handling of general resources without synchronization race condition. Exploiting this vulnerability could allow a attacker to cause service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950.

Summary Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-23950 DESCRIPTION: node-tar,a Tar for Node.js, has a race condition...

CVE-2026-32988

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified parent directory. Attackers can exploit a race condition in parent-path alias changes to write attacker-controlled bytes...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

PT-2026-29422

Name of the Vulnerable Software and Affected Versions ONNX versions prior to 1.21.0 Description ONNX contains a path traversal vulnerability via symlink that allows reading arbitrary files outside the model or user-provided directory. The vulnerability exists because the check for symlinks is...

Unspecified vulnerability in Apple macOS Tahoe (CNVD-2026-19041)

Apple macOS Tahoe is an operating system from the American company Apple. A security vulnerability exists in Apple macOS Tahoe, which can be exploited by an attacker to access protected portions of the file system...

PT-2026-33160

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description A use after free issue in FileSystem allows a remote attacker to potentially exploit object corruption via a crafted HTML page. Use after free is a memory corruption flaw that occurs...

Claude SDK for Python security vulnerabilities

Claude SDK for Python is an open-source Python software development toolkit developed by Anthropic for calling the Claude API. Versions of Claude SDK for Python prior to 0.87.0 contained a security vulnerability. This vulnerability stemmed from the asynchronous local file system’s memory tools...

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...