49716 matches found
The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...
ROS-20260306-73-0014
A vulnerability in the seg6 component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
The vulnerabilities of the functions vhost_scsi_set_endpoint() and vhost_scsi_clear_endpoint() in the drivers/vhost/scsi.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions vhostscsisetendpoint and vhostscsiclearendpoint in the drivers/vhost/scsi.c module of the Linux kernel are related to the repeated use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
The vulnerability of the cmd_hdl_filter() function in the drivers/staging/rtl8712/rtl8712_cmd.c module, which supports additional devices of the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cmdhdlfilter function in the drivers/staging/rtl8712/rtl8712cmd.c file, which supports additional devices in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise t...
The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2026-23808
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key GTK on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthoriz...
EUVD-2026-9820
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
EUVD-2026-9822
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27748
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27748
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27748 Avira Internet Security Arbitrary File Deletion via Improper Link Resolution
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27750
Avira Internet Security is affected by a TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and later deletes them in a separate cleanup phase without revalidating the target path. An local attacker could ...
CVE-2026-27750 Avira Internet Security Optimizer TOCTOU
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750 Avira Internet Security Optimizer TOCTOU
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...