25760 matches found
PT-2026-91584
Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description A buffer overflow occurs due to insufficient size validation. A local attacker can exploit this to cause unexpected system termination or corrupt kernel memory. Recommendations Update to macOS...
PT-2026-91733
A vulnerability has been found in GPAC 26.07.0. Affected is the function gf sg dom event bubble of the file src/scenegraph/dom events.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...
CVE-2026-90824: Stack-based Buffer Overflow
A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...
PT-2026-91754
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd elf set group contents of the file bfd/elf.c of the component SHT GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has...
CVE-2026-84520: Buffer Copy without Checking Size of Input
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2026-65359: Out-of-bounds Read
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination o...
CVE-2026-90891: Improper Restriction of Software Interfaces to Hardware Features
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboo...
PT-2026-91761
A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfd write merged section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...
CVE-2026-90831: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...
CVE-2026-90828: NULL Pointer Dereference
A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elforphancompatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local...
PT-2026-91753
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A flaw in the ELF Orphan Section Handler component allows a local attacker to cause a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null,...
CVE-2026-17133: Improper Neutralization of Special Elements used in an OS Command
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
PT-2026-91045
Name of the Vulnerable Software and Affected Versions Matthias-Wandel jhead versions prior to 3.4 Description A heap-based buffer overflow exists in the WebP EXIF Handler component within the ProcessGpsInfo function of the gpsinfo.c file. This issue occurs when the TAG GPS LAT or TAG GPS LONG...
CVE-2026-90684: Reachable Assertion
A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfieldcount of the file scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. The...
CVE-2026-19816: Incorrect Authorization
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-90890: Untrusted Pointer Dereference
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash...
CVE-2026-90996: Integer Underflow (Wrap or Wraparound)
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services NSS responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affect...
PT-2026-91040
Name of the Vulnerable Software and Affected Versions GNU libredwg version 0.13.4 Description A security flaw in the Layer Encoding component exists within the DWG TABLE function of the src/dwg.spec file. A local manipulation can lead to a null pointer dereference, which occurs when raw zeroing...
PT-2026-91046
šØ CVE-2026-90683 A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf node unregister of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in reachable assertion. Attacking locally is a requirement. The exploit is now publ...
Linux Distros Unpatched Vulnerability : CVE-2026-90801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of...