CVE-2026-16937 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-16937 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-16936 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-16936 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-16936

A buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to execute arbitrary code (CVSS 8.8, scope changed). No patch version or exploit details are provided in the documents.

CVE-2026-16935

A TOCTOU race condition in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate privileges, yielding full confidentiality, integrity and availability impact (CVSS 7.8). No exploitation in the wild is reported; IBM support page referenced for patch guidance...

CVE-2026-16935 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16934 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow...

CVE-2026-16934

A local attacker with low privileges can exploit a heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 to gain elevated privileges, with high confidentiality, integrity, and availability impact. No specific exploit details or patch information are provided in the documents; monitor...

CVE-2026-74367

A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability arises from inconsistent internal state management during error conditions in virtual device creation. If an error occurs, the driver may not properly clear its internal state, leading to resource issues. This cou...

mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

CVE-2026-74327

A flaw was found in the Linux kernel. A local attacker could trigger a null pointer dereference in the isvmareahugepages function. This occurs when findvmarea returns a NULL value, which is not properly handled before being dereferenced. Successful exploitation of this vulnerability could lead to...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

CVE-2026-74291

A flaw was found in the Linux kernel's ASoC Audio System on Chip topology component. This vulnerability allows a local attacker to provide a specially crafted, malformed audio topology configuration blob with non-NUL-terminated name strings. This can cause the parser to read beyond the intended...

CVE-2026-74286

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP module. The module fails to properly allocate per-CPU statistics, leaving a pointer uninitialized. A local attacker can exploit this by creating a PFCP rtnetlink device, which triggers a null pointer dereference. This...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

CVE-2026-16922

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-74272

A flaw was found in the Linux kernel's cxl/region module. Multiple race conditions exist during the deletion of CXL Compute Express Link regions. A local attacker could exploit these race conditions by repeatedly attempting to delete a region via the sysfs interface or by racing with kernel...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...