CVE-2025-9142

CVE-2025-9142 concerns Harmony SASE Windows Client. Local users can trigger the client to write or delete files outside the intended certificate working directory due to insufficient validation in certificate processing before privileged service use. Symptoms described by Check Point indicate exp...

CVE-2025-40942

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.4. Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges...

Security Bulletin:Vulnerability in pam affects IBM Netezza Appliance

Summary The pam package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-8941 Vulnerability Details CVEID:CVE-2025-8941 DESCRIPTION: A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local...

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

Posted by Seth Jenkins With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what kind of Linux kernel drivers might be accessible from the resulting userland context, the mediacodec context. As per the AOSP documentation, the mediacodec SELinux context is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001743 advisory. A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured this is not the...

MiracleLinux 3 : kernel-2.6.18-8.17AXS3 (AXSA:2008-82:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-82:04 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. CVE-2007-5498: The Xen hypervisor block backend driver for Linux...

MiracleLinux 3 : kvm-84-7AXS3 (AXSA:2009-490:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-490:03 advisory. This package provides the kvm kernel modules built for the Linux kernel CVE-2009-3638 Integer overflow in the kvmdevioctlgetsupportedcpuid function i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001737 advisory. In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel wit...

MiracleLinux 3 : gcc-4.1.2-46.2.1 (AXSA:2010-86:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-86:01 advisory. The gcc package contains the GNU Compiler Collection version 4.1. You will need this package in order to compile C code. Security issues fixed with this update...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001373 advisory. An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMA...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001689 advisory. A use-after-free flaw was found in the Linux kernels sound subsystem in the way a user triggers concurrent calls of PCM hwparams. The hwfree ioctls or similar race...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001703 advisory. An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nftseteleminit leading to a buffer overflow could be used by a local attacker to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001769 advisory. A flaw was found in the Netfilter subsystem in the Linux kernel. The sctpmtcheck did not validate the flagcount field. This flaw allows a local privileged CAPNETADMI...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001082 advisory. Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001538 advisory. A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001750 advisory. A use-after-free flaw was found in the Linux kernels nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw...

MiracleLinux 3 : libvirt-0.3.3-14.1.1AXS3 (AXSA:2009-33:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-33:01 advisory. Libvirt is a C toolkit to interract with the virtualization capabilities of recent versions of Linux and other OSes. Fixed bugs: CVE-2008-5086 Multipl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001765 advisory. A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. Due to a race condition...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001702 advisory. A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001741 advisory. In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi...