Linux fs/xfs/xfs_trans.c Heap Buffer Overflow DoS

The vulnerability of the xfstransallocdir function in the fs/xfs/xfstrans.c module of the Linux file system support module is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

NTFS Heap Buffer Overflow DoS

The vulnerability of the ntfsfillsuper function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

GO-2026-4816 NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs

NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs...

CVE-2026-33531

CVE-2026-33531 affects InvenTree prior to 1.2.6. A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary server files via crafted template tags in report.py (encode_svg_image(), asset(), uploaded_image()). Exploitation requires staff access to uplo...

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

CVE-2026-33486

Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web...

CVE-2026-33486

Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web...

CVE-2026-28892

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...

CVE-2026-28825

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...

CVE-2026-25167

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2026-25175

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-23673

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-24290

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...

SUSE-SU-2026:1081-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. - CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply...

Linux fs/ubifs/file.c Heap Buffer Overflow DoS

The vulnerability of the ubifswriteend function in the fs/ubifs/file.c module of the Linux file system support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel fscache_perform_lookup Heap Buffer Overflow DoS

The vulnerability of the fscacheperformlookup function in the fs/fscache/cookie.c module of the Linux kernel’s file system support module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

btrfs_clear_buffer_dirty Heap Buffer Overflow DoS

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

Linux kernel Btrfs Reduce Alloc Profile DoS

The vulnerability of the btrfsreduceallocprofile function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause...

Roadiz development monorepo code issues and vulnerabilities

The Roadiz Development Monorepo is an open-source content management system development kit developed by Roadiz. Versions of the Roadiz Development Monorepo prior to 2.7.9, 2.6.28, 2.5.44, and 2.3.42 contained code vulnerabilities. These vulnerabilities allowed authenticated attackers to read...

Linux kernel CIFS Mount Buffer Overflow DoS

The vulnerability of the cifsmount function in the fs/cifs/connect.c module of the Linux kernel file system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...