CVE-2026-64042

A flaw was found in the Linux kernel's vfio/pci subsystem. This vulnerability occurs because the Direct Memory Access Buffer DMABUF export mechanism does not adequately verify if Base Address Register BAR resources are properly reserved before allowing access. A local attacker could exploit this ...

CVE-2026-64084

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem, specifically within the pmbus/adm1266 driver. This vulnerability involves an out-of-bounds memory access, where the system attempts to read or write data beyond the allocated memory region. A local attacker could exploit...

CVE-2026-53378

A flaw was found in the Linux kernel's Direct Rendering Manager DRM color operation module drm/colorop. This vulnerability arises from improper reference tracking of blob properties during state duplication, destruction, and reset operations. An attacker with local access could potentially exploi...

nodejs: Node.js: Unauthorized file metadata modification

A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system...

DEBIAN-CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

UBUNTU-CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-64118

A flaw was found in the Linux kernel's qed driver. This vulnerability involves a double free error in the qedcxttablesalloc function, where memory is deallocated twice if a Connection ID CID bitmap allocation fails. This can lead to memory corruption, potentially allowing a local attacker to caus...

CVE-2026-53371

A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...

CVE-2026-12080

CVE-2026-12080 affects the QEMU Guest Agent (qga). A local, unprivileged user can exploit the guest-ssh-add-authorized-keys handler by manipulating symbolic links through a deterministic directory-symlink bypass or a TOCTOU file-symlink race, enabling ownership of arbitrary root-owned files/direc...

CVE-2026-64121

A flaw was found in the Linux kernel's Intermediate Functional Block ifb network device. A local user with network configuration privileges can trigger a slab-out-of-bounds read by configuring an asymmetric ifb device and querying its ethtool statistics. This vulnerability can lead to a kernel...

CVE-2026-64041

A flaw was found in the Linux kernel's ASoC fs210x audio codec driver. An incorrect use of the strscpy function in fs210xeffectsceneinfo can lead to a buffer overflow. This occurs when a string is copied without proper size validation, potentially allowing a local attacker to cause a denial of...

CVE-2026-64109

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

CVE-2026-64137

A flaw was found in the Linux kernel's Common Internet File System CIFS client. This vulnerability allows an unprivileged local user to send witness notifications or join a specific multicast group without proper administrative privileges. Exploiting this flaw could lead to information disclosure...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

dotnet: .NET: Local code execution via deserialization of untrusted data

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure

A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system...

Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation

A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially...

httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges

A flaw was found in Apache HTTP Server. This improper privilege management vulnerability allows local .htaccess authors to read files with the privileges of the httpd user. This could lead to unauthorized information disclosure...