21231 matches found
AZL-100397 CVE-2026-89525 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the number of entries in that array, not the highest valid index. The val...
DEBIAN-CVE-2026-45767
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...
UBUNTU-CVE-2026-45767
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...
CVE-2026-45767 Suricata datasets: save to absolute filename can be bypassed when combined with load command
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...
EUVD-2026-75776
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...
CVE-2026-45767
Suricata (network IDS/IPS/NSM engine) versions prior to 7.0.16 and 8.0.5 contain a vulnerability in the datasets feature where the save command's protection against absolute filenames can be bypassed when combined with the load command. A malicious rule could potentially overwrite any file on the...
USN-8748-1: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - GFS2 file system; -...
hugo: Hugo: Arbitrary file read/write via unrestricted file system access in Node-based asset pipelines
A flaw was found in Hugo. When building a Hugo site that uses Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS, Hugo invoked the configured Node tools without restrictions on file system access. This could allow code running through these tools to read or write files outside the...
CVE-2026-81994
Adobe Acrobat Reader is affected by a Prototype Pollution (CWE-1321) vulnerability that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction —a victim must open a malicious...
EUVD-2026-74204
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
EUVD-2026-74070
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
CVE-2026-69772
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2026-69372
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
CVE-2026-68875
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-83995
CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
EUVD-2026-73566
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73556
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69617
CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) component that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and l...