CVE-2026-93212

In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsdserv deref in nfsdfilenetdispose nfsdfilenetdispose is the consumer side of l-freeme: the nfsd service thread loop calls it to drain entries that the filecache garbage collector and shrinker append via...

CVE-2026-93211

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registering shrinker shrinkerregister precedes the INITLISTHEAD loop and the drchashsize store. On weakly-ordered architectures arm64, ppc, a shrinker scan can observe drchashsize before the...

CVE-2021-24086-exp

CVE-2021-24086 这是针对 CVE-2021-24086（"Windows TCP/IP 拒绝服务漏洞"）的概念验证，该漏洞是 tcpip.sys 中的空指针解引用，由微软于 2021 年 2 月修补。根据这条 推文，该漏洞由 @piazzt 发现。可通过发送恶意的 IPv6 UDP 数据包远程触发。 你可以在此处阅读微软的博客：影响 TCP/IP 的多个安全更新：CVE-2021-24074、CVE-2021-24094 和 CVE-2021-24086。它简要讨论了影响以及解决方法/缓解措施。 关于根本原因的更深入讨论可在 doar-e.github.io 上找到：逆向工...

CVE-2026-73547

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

EUVD-2026-84110

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

CVE-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

CVE-2026-48521

Envoy versions prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 contain a null pointer dereference (CWE-476) in ProdClusterManagerFactory::allocateConnPool during HTTP/3 connection pool selection. When auto_config and HTTP/3 are enabled, certain LoadBalancerContext implementations used by synthetic, ...

K000163356: OpenSSL vulnerabilities CVE-2026-18798, CVE-2026-14457, and CVE-2026-54874

Security Advisory Description CVE-2026-18798 Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — Desreferencia NULL por sobrescritura de estado en S2OPC Prueba de concepto independiente para CVE-2026-90782 en S2OPC Safe & Secure OPC. Vulnerabilidad En allocnotificationmessageitems S2OPC 1.7.3 y anteriores: Se utiliza una única variable status compartida tanto para las...

Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...

SUSE SLED15 / SLES15 Security Update : libusb-1_0 (SUSE-SU-2026:4050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4050-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allow...

CVE-2025-68325

CVE-2025-68325 schcake 未考虑 cakeenqueue 返回非空结果的情况，导致 qdisc 树中的 qlen 不平衡，从而在其父级调度器（如 qfq）中触发空指针解引用。 受影响版本 已在 v6.19-rc1 中修复 严重性 低 补丁 root@kitploit: In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cakeenqueue, assumes that the parent qdis...

OESA-2026-3969 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization...

OESA-2026-3968 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

OESA-2026-3966 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

CVE-2026-57225

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes that a configured JSON or NDJSON dataset valuekey resolves to a string. A trusted or untrusted dataset or rule feed...

UBUNTU-CVE-2026-57225

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes that a configured JSON or NDJSON dataset valuekey resolves to a string. A trusted or untrusted dataset or rule feed...