CVE-2026-43806

CVE-2026-43806 is a local-denial-of-service issue addressed by removing the vulnerable code in macOS Tahoe 26.6. The primary sources (NVD/NCSC/CVE lists) indicate a DoS condition that could be triggered by a local attacker, with a CVSS v3.1 base score of 5.5 (Medium) and local attack vector with ...

CVE-2026-43806

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service...

EUVD-2026-49615

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service...

kernel: XFS data corruption using reflink

A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...

USN-8613-1: FreeIPMI vulnerabilities

Zhihan Zheng discovered that FreeIPMI had several buffer overflow vulnerabilities in ipmi-oem response message handling. A local attacker with control a malicious IPMI device or simulator could possibly cause FreeIPMI to crash, resulting in a denial of service. CVE-2026-33554, CVE-2026-50031...

CVE-2026-14837

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorize...

CVE-2026-64418

A flaw was found in the Linux kernel's memory management mm shrinker subsystem. A race condition exists where the shrinkerinfo array can be prematurely freed while still accessible, leading to a use-after-free or double-free vulnerability. This memory corruption can be exploited by a local attack...

CVE-2026-65010

A flaw was found in Hugging Face Datasets through 5.00 in Extractor.extract. When archive contents are extracted to predictable output paths, the extractor follows pre-planted symlinks instead of confining writes to the intended directory. A local attacker who can place those symlinks can redirec...

CVE-2026-14837

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorize...

CVE-2026-14837 SSH Enablement Signature Verification Bypass

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorize...

EUVD-2026-49115

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorize...

CVE-2026-14837

CVE-2026-14837 affects multiple Lenze products with an improper signature verification in the SSH enablement mechanism. The vulnerability allows a low-privileged, local attacker to bypass verification of the SSH enable file signature and enable SSH access on the device, potentially resulting in u...

CVE-2026-64393

A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows a local attacker to escalate privileges by manipulating Server Message Block SMB2 SETINFO operations. The system incorrectly uses the ksmbd worker's credentials instead of the original user's credentials when...

BIT-DOTNET-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

BIT-DOTNET-SDK-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

PT-2026-65024

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

SUSE CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

SUSE CVE-2026-64324

In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the...

Debian dsa-6400 : exim4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6400 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6400-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-16730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as...