PT-2026-24276

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Windows Resilient File System ReFS. Successful exploitation may allow an authorized attacker to elevate privileges locally. The issue involv...

CVE-2026-23672: Out-of-bounds Read

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

RockyLinux 9 : nfs-utils (RLSA-2026:3940)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3940 advisory. nfs-utils: rpc.mountd in the nfs-utils privilege escalation CVE-2025-12801 Tenable has extracted the preceding description block directly from the RockyLinux...

Linux kernel d_alloc_parallel Heap Buffer Overflow DoS

The vulnerability of the dallocparallel function in the fs/dcache.c module of the Linux kernel’s file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux NFS DoS

The vulnerability of the nfsd4ffprocgetdeviceinfo function in the fs/nfsd/flexfilelayout.c module, which is part of the NFS network file system support in Linux kernels, stems from the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause servi...

Linux fs/smb/client DoS

The vulnerability of the fs/smb/client component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Brokering File System Resource Management Vulnerability

The Microsoft Brokering File System is a file system developed by Microsoft Corporation. There is a resource management vulnerability in the Microsoft Brokering File System. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windo...

CLSA-2026-1773047152 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

CLSA-2026-1773045484 kernel: Fix of 28 CVEs

fix: dm: fix dmblkreportzones CVE-2025-38141 - ice: Fix a null pointer dereference in icecopyandinitpkg CVE-2025-38664 - qed: Don't collect too many protection override GRC elements CVE-2025-39949 - drm/amd/display: Avoid a NULL pointer dereference CVE-2025-39693 - iommu/amd/pgtbl: Fix possible...

RHSA-2026:3939 Red Hat Security Advisory: nfs-utils security update

Bulletin has no description...

RHSA-2026:3940 Red Hat Security Advisory: nfs-utils security update

Bulletin has no description...

BIT-DJANGO-2026-25674 Potential incorrect permissions on newly created file system objects

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

CVE-2026-29039 changedetection.io: XPath - Arbitrary File Read via unparsed-text()

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify XPath expressions as content filters via the includefilters field. These XPath expressions are processed using the elementpath library which...

MGASA-2026-0050 Updated python-django packages fix security vulnerability

Potential incorrect permissions on newly created file system objects. CVE-2026-25674...

Golang 1.25.x < 1.25.8 / 1.26.x < 1.26.1 Multiple Vulnerabilities

The version of Golang running on the remote host is prior to 1.25.8, or 1.26.x prior to 1.26.1. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory. - The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted...

Linux Ext4 make_indexed_dir Heap Buffer Overflow DoS

The vulnerability of the makeindexeddir function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel Network File System Heap Buffer Overflow DoS

The vulnerability of the netfsunbufferedwriteiterlocked function in the fs/netfs/directwrite.c module, which is part of the Linux kernel’s network file system support, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

SICK Lector85x and SICK SICK Lector83x security vulnerabilities

SICK Lector85x and SICK SICK Lector83x are a series of QR code image recognition readers developed by the German company SICK. Both devices have security vulnerabilities; these vulnerabilities stem from incomplete execution of the whitelist. Attackers could potentially access the restricted file...

Navtor NavBox security vulnerabilities

Navtor NavBox is a shipping information system device developed by the Norwegian company Navtor. It is used for electronic nautical chart management and synchronization of navigation data. There is a security vulnerability in Navtor NavBox. This vulnerability stems from the HTTP service not...