296266 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-109968
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The l...
FreeBSD -- TOCTOU race between sound(4) buffer resizing and mmap
Problem Description: When an audio channel's buffer needs to be resized, the sound4 driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer. An mmap2 call on another thread can complete during this window, after which the resize path frees the...
PT-2026-114424
Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description When using the --remote-header-name -J option, the software fails to maintain anti-clobbering protection under specific conditions. This occurs if an intermediate 103 Early Hints response precedes...
CVE-2026-50215
The Akamai Guardicore Platform Agent (GPA) shipped before version 7.4 contains a use-after-free vulnerability in the Windows WFP packet-capture driver. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can trigger this flaw at DISPATCH_LEVEL by sending a s...
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...
CVE-2026-105390
The OpenVPN ovpn-dco-win component for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 is vulnerable to a deadlock caused by improper synchronization . A local attacker can trigger this condition by performing a crafted write to the ovpn-dco device , which results in the host becomin...
CVE-2026-105390
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...
DEBIAN-CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-110159
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
DEBIAN-CVE-2026-110144
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88089
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
CVE-2026-88088
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88082
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85876
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-78628
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...
CVE-2026-78632
The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...