Lucene search
+L

15712 matches found

RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-64245

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. Specifically, within the fbfindmode function, a use-after-free UAF vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulat...

5.5CVSS6.2AI score0.0016EPSS
SaveExploits0References4
Broadcom
Broadcom
added yesterday3 views

Security update provided to RockyLinux 9 kernel (RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617)

Brocade SANnav OVA has provided Security updates for RockyLinux 9 kernel RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617 vulnerabilities. Rocky Linux 9 : kernel RLSA-2026:2212 kernel: net: openvswitch: fix nested key length validation in the set action CVE-2025-37789 kernel: Linux kernel:...

7.8CVSS7.6AI score0.0053EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-64775

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination...

5.8AI score0.00157EPSS
SaveExploits0References8
CVE
CVE
added 2 days ago11 views

CVE-2026-64539

The CVE-2026-64539 entry documents a Linux kernel Bluetooth issue where eir_create_adv_data() can overflow the stack when prepending a 3-byte Flags AD to advertising data. The root cause is copying adv_data_len bytes after potentially prepending Flags into a fixed 31-byte buffer for legacy advert...

5.7AI score0.0016EPSS
SaveExploits0References5
OSV
OSV
added 2 days ago4 views

UBUNTU-CVE-2026-51300

A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By...

9.1CVSS6AI score0.00226EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2 days ago7 views

CVE-2026-16411

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

9.8CVSS5.9AI score0.00315EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2 days ago7 views

CVE-2026-14241

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

9.8CVSS5.9AI score0.00252EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago3 views

UBUNTU-CVE-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart tables. During this conversion, the memmove length is derived directly fro...

5.6AI score0.00172EPSS
SaveExploits0References10
CVE
CVE
added 2 days ago15 views

CVE-2026-64533

In the Linux kernel NTFS3 code, the log_replay path that converts DIR_PAGE_ENTRY_32 to DIR_PAGE_ENTRY may read beyond bounds when processing lcns_follow, enabling out-of-bounds access from malformed restart-table metadata. The fix constrains memmove length by computing the maximum valid lcns_foll...

5.7AI score0.00172EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...

6AI score0.00344EPSS
SaveExploits0References3
OSV
OSV
added 2 days ago5 views

UBUNTU-CVE-2026-64218

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix reportwork leak on backbonegw purge batadvblapurgebackbonegw removes stale backbone gateway entries, but fails to properly handle their associated reportwork: - If reportwork is running, the purge must wait f...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 4 days ago8 views

SUSE CVE-2026-64319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmetauthreply accesses the variable-length rval array using attacker-controlled hl hash length and dhvlen DH value length fields without verifying they fi...

9.1CVSS6AI score0.00524EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 4 days ago5 views

SUSE CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

7.1CVSS5.8AI score0.00119EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 4 days ago5 views

SUSE CVE-2026-64456

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...

7.7CVSS5.8AI score0.00148EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago5 views

CVE-2026-64456

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...

7.7CVSS0.00148EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago5 views

CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

7.8CVSS0.00139EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago8 views

CVE-2026-64406

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in btacceptdequeue btacceptget takes a temporary reference before dropping the accept queue lock. btacceptdequeue currently drops that reference before btacceptunlink, leaving only the queue reference...

8CVSS0.00274EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago7 views

CVE-2026-64354

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

7.8CVSS0.00129EPSS
SaveExploits0References4
NVD
NVD
added 4 days ago6 views

CVE-2026-64322

In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst + le16tocpust-reallocationTableLen sb-sblocksize is false, i.e. it treats reallocationTableLen as a...

7.8CVSS0.00164EPSS
SaveExploits0References8
OSV
OSV
added 4 days ago4 views

UBUNTU-CVE-2026-64491

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...

5.7AI score0.00174EPSS
SaveExploits0References6
Rows per page
Query Builder