34479 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-62899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a...
Linux Distros Unpatched Vulnerability : CVE-2026-68441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling...
RHEL 10 : rhc-worker-playbook (RHSA-2026:54168)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54168 advisory. A worker for yggdrasil that receives Ansible playbooks and executes them against the local host. Security Fixes: net: golang: Go net...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Out-of-bounds write in .NET...
GHSA-VG44-H755-9HW7 Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Out-of-bounds write in .NET...
GHSA-FX4Q-GJRX-2JW6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An out-of-bounds write in .NET...
GHSA-GG8C-3338-XW2F Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An out-of-bounds write in .NET...
CVE-2026-68140
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...
GHSA-9MR8-PWPW-3J2W Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...
GHSA-JQHP-238X-QHGF Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via unchecked input for the loop condition in the System.Net.WebSockets. An attacker can cause a denial of service by sending specially crafted network requests that trigger excessive resource...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent handling of HTTP requests in the System.Net.HttpListener. An attacker can gain unauthorized access to sensitive information by sending specially crafted HTTP requests that exploit discrepancies in...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent handling of HTTP requests in the System.Net.HttpListener. An attacker can gain unauthorized access to sensitive information by sending specially crafted HTTP requests that exploit discrepancies in...
CVE-2026-68397
A flaw was found in the Linux kernel's net/iucv module. The afiucvhsrcv function fails to properly manage socket references. This allows a local attacker to trigger a use-after-free vulnerability by concurrently closing a socket while it is being processed. Successful exploitation can lead to a...