296828 matches found
SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4676-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4676-1 advisory. WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome...
FreeBSD : FreeBSD -- TOCTOU race between sound(4) buffer resizing and mmap (1fef3562-c848-11f1-ada3-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1fef3562-c848-11f1-ada3-bc241121aa0a advisory. When an audio channel's buffer needs to be resized, the sound4 driver checks that the buffer is not...
CVE-2026-110150
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...
CVE-2026-58098: Out-of-bounds Write
When semop2 blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is only 15 bits wide. If...
CVE-2026-109968
A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read t...
X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...
X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...
CVE-2026-95180
An issue in Justson agentweb-core versions v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components . This is caused by incorrect access control during the handling of intent:// URLs within the DefaultWebClient compone...
CVE-2026-108433: Reliance on Untrusted Inputs in a Security Decision
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...
PT-2026-115235
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information...
CVE-2026-95180
An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...
CVE-2026-101308: Time-of-check Time-of-use (TOCTOU) Race Condition
When an audio channel's buffer needs to be resized, the sound4 driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer. An mmap2 call on another thread can complete during this window, after which the resize path frees the now-mapped buffer...
CVE-2026-111230: External Control of File Name or Path
Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php. Attackers can set a non-matching Result Match string so checkStatus logs file...
PT-2026-115199
SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file get contents to read...
HPESBNW05159 rev.1 - HPE Networking Advance Notification of Security Advisories for October 22, 2026.
Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Mobility Controller Software : ----- IMPORTANT NOTE: In this advance notification, HPE Networking will not provide affected software versions. - The "Aruba...
UBUNTU-CVE-2026-109969
A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AFUNIX sockets without explicit permission restrictions or peer credential verification. Under a permissive process umask, any local user can connect to the control socket and inject arbitrary...
DEBIAN-CVE-2026-110858
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull whose unsafe-option guard inspects only keyword arguments, not the positional refspec. Attackers controlling the refspec can supply --upload-pack= to execute OS commands as the calling process over...
CVE-2023-32233-reproduction
CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root-Cause Analysis What this repo is: my hands-on reproduction and study of CVE-2023-32233, a use-after-free in the Linux kernel Netfilter nftables subsystem that allows local privilege escalation, publicly disclosed in May 2023 by Patryk...
CVE-2025-6019-Exploitation
CVE-2025-6019 – UDisks2 ResizeFilesystem Vulnerability Educational Reproduction This repository documents an educational reproduction of CVE-2025-6019 performed in a controlled lab environment Ubuntu VM, non-production. 🛡️ Security Notice This research reproduces CVE-2025-6019 in a sandboxed Ubunt...
CVE-2026-110858
GitPython versions 3.1.30 before 3.2.0 are vulnerable to remote code execution via a command injection flaw in the Remote.pull() function. The root cause is that the unsafe-option guard only inspects keyword arguments and fails to validate the positional refspec . An attacker who controls the ref...