15966 matches found
FreeBSD : chromium -- security fixes (d14c86b6-9ca3-11f1-bf98-a8a1599412c6)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d14c86b6-9ca3-11f1-bf98-a8a1599412c6 advisory. Chrome Releases reports: This update includes 15 security fixes: Tenable has extracted the...
CVE-2026-58083
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
EUVD-2026-62365
The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a second time to populate them. A process sharing the address space via rfork2 can mutate the map between the two passes, causing the second...
CVE-2026-58086
FreeBSD 15.0 and 15.1 are affected by a privilege validation flaw in the ktrace(2) facility. An unrelated code change inadvertently caused PRIV_KTRACE to always be denied to a jailed root user, meaning tracing configured by that user was not flagged as privileged. As a result, an unprivileged use...
EUVD-2026-62340
As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...
EUVD-2026-62339
After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...
CVE-2026-49427
Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile2 transmitted such an object with the SFNOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to...
CVE-2026-49419
When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...
CVE-2026-49419
FreeBSD 15.0+ kernel contains a double-free bug in kern_jail_set() and kern_jail_get(): when the JAIL_AT_DESC flag is used, the caller's current prison reference is released before descriptor lookup, then released again on error paths. An unprivileged local user can trigger a prison reference cou...
EUVD-2026-62231
When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...
CVE-2026-49419 Jail reference count underflow
When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...
FreeBSD : Gitlab -- Vulnerabilities (3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3 advisory. Gitlab reports: Code Injection issue via GraphQL directive impacts GitLab CE/EE Cross-Site...
The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system allows a hacker to cause a service failure.
The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of system calls unlinkat and funlinkat in the kernels of FreeBSD allows a attacker to compromise the integrity of the protected information.
The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability of the tcp_rack.ko module in the kernel of FreeBSD allows a hacker to increase their privileges.
The vulnerability of the tcprack.ko module in FreeBSD operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the waitid() system call layer of the Linuxulator kernel in FreeBSD allows a attacker to disclose protected information.
The vulnerability in the implementation of the waitid system call layer of the Linuxulator kernel in FreeBSD operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...
The vulnerability of the compat32 subsystem in FreeBSD’s kernel allows a hacker to disclose protected information.
The vulnerability of the compat32 compatibility layer in the Linuxulator kernel of FreeBSD operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these layers...
FreeBSD : libXfont2 -- multiple vulnerabilities (1fae5869-9275-11f1-83e9-901b0e13f1a0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1fae5869-9275-11f1-83e9-901b0e13f1a0 advisory. Zhixi Jace Sun, independent security researcher reports: Tenable has extracted the preceding...
FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...
FreeBSD : MySQL 8.4 -- Multiple vulnerabilities (10f5d195-90a5-11f1-bc30-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5d195-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 31 of which...