Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before registering the video device. video drvdata should be set before the video device is registered; otherwise, videodrvdata may return NULL in the open file operations, leading to errors...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ethtool: Do not perform operations on net devices that are not yet registered. There is a short period between when a net device starts to be unregistered and when it is actually removed from the list of available devices. During...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.96, read and write operations in GFX using Google Chrome allowed a remote attacker to perform arbitrary read/write operations through malicious network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mmc: vub300: fix warning – do not call blocking ops when !TASKRUNNING vub300enablesdioirq works with a mutex and requires TASKRUNNING to function properly. Ensure that we mark the current context as TASKRUNNING for sleepable...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: A fix was made to perform a sanity check on the inlinedots inode. As Wenqing reported in Bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215765 This issue causes a kernel panic when performing the following actions: -...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops based on the operation number, without any range checking of that value. It assumes that callers will be careful enough to avoid calling...

Astra Linux – Vulnerability in opensc

A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add null pointer check for inode operations This adds a sanity check for the iop pointer of the inode which is returned after reading Root directory MFT record. We should check the iop is valid before trying to create t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A flaw was discovered in the Linux kernel. A denial-of-service attack may occur if a consecutive request for NVMEIOCTLRESET and NVMEIOCTLSUBSYSRESET is made through the device file of the driver, resulting in a disconnection of the PCIe link...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

A cross-site request forgery (CSRF) vulnerability affects multiple Contec products. A user who views a specially crafted page while logged in may have unintended operations performed on the target system. The CVSS 3.0 base score is 4.3 (MEDIUM) with a network attack vector, low complexity, no req...

EUVD-2026-77218

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-84567: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

PT-2026-91463

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description IBM Verify Identity Access lacks origin validation, which may enable a remote attacker to perform operations on behalf of a victim and potentially launch subsequent attacks...

PT-2026-91068

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

Oracle Complex Maintenance Component Data Compromise

The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...

FMP/NOTIFY Protocol DoS

The vulnerability of the FMP/NOTIFY protocol in Wireshark, a network traffic analyzer, is related to the lack of checks on input data during cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

Internal Operations Component Full Control

The vulnerability of the Internal Operations component of the Oracle Spares Management software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain full control over the system through HTTP requests...