CVE-2026-49429

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49430

In the ZFS_IOC_RECV_NEW heal path, OpenZFS truncates a 64-bit payload size to 32-bit for allocation but uses the original 64-bit size as the byteswap length, causing a heap overflow exploitable by any local user with the "receive" delegated permission. Fixed in FreeBSD 14.3/14.4/15.0/15.1 release...

CVE-2026-49429 Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49429

A kernel heap overflow in the OpenZFS component of FreeBSD affects the ZFS_IOC_USERSPACE_MANY ioctl used by zfs-userspace(8). The root cause is a 64-bit to 32-bit truncation : the output buffer size is truncated to 32 bits for kernel allocation, but the original 64-bit value is used as the write ...

EUVD-2026-62239

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49429 Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-76035

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-19 15:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgyobtpq325 2026-08-21 01:40:09+00:00| seen|...

CVE-2026-74982

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74981

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:56+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74980

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74978

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:49+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74975

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74971

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74967

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:23+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74961

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:09+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 18:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjt73o7372f...

CVE-2026-74957

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74951

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74946

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtitqfyumo2m...

CVE-2026-74941

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:23+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtj44msevn2y...

CVE-2026-74936

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 21:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtk5sspqbr25...