Lucene search
+L

4610 matches found

EUVD
EUVD
added 2026/08/21 4:31 p.m.5 views

EUVD-2026-64002

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

5.5AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/21 12:40 p.m.4 views

CVE-2026-74524

A flaw was found in the Linux kernel. When performing memory hot-remove operations on systems using RISC-V architecture, an out-of-bounds page-table walk can occur. This issue arises because the system attempts to access memory outside of its designated boundaries, potentially leading to a kernel...

5.5CVSS5.2AI score0.00168EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 8:53 a.m.1 views

CVE-2026-74451

A flaw was found in the drm/panthor component of the Linux kernel. The ifacefwtocpuaddr function, responsible for validating firmware interface structure sizes, does not adequately check if the firmware-provided Microcontroller Unit MCU virtual address fits entirely within the shared memory...

7.8CVSS5.2AI score0.00129EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.6 views

PT-2026-79294

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

5.4AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.5 views

PT-2026-79401

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-meta iotlb caches the vhost iotlb map that backs each vring metadata region, and iotlb access ok returns early on a cache hit, taking the hit as proof that the...

5.5AI score
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/08/20 8:33 p.m.6 views

CVE-2026-64719

A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following...

8.8CVSS5.5AI score0.00291EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/20 4:38 p.m.6 views

CVE-2026-74312

A flaw was found in the Linux kernel's vhost/vdpa subsystem. Improper validation of the virtqueue index in the vhostvdpammap and vhostvdpafault functions allows an out-of-range index to be used. This can lead to an out-of-bounds memory access in driver-specific callbacks, potentially causing...

7.8CVSS5.4AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/20 3:04 p.m.5 views

CVE-2026-74275

A flaw was found in the Linux kernel. A vulnerability exists in the cxlcancelautoattach function where an invalid negative index can be used to access an array. This out-of-bounds memory access could allow a local attacker to cause system instability or a denial of service DoS...

8.4CVSS5.3AI score0.00131EPSS
SaveExploits0References4
Circl
Circl
added 2026/08/20 2:25 p.m.8 views

CVE-2026-20319

creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26...

7.5CVSS4.9AI score0.00279EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/20 6:35 a.m.3 views

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

7CVSS5.9AI score0.00135EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/19 6:59 p.m.5 views

CVE-2026-72488

A flaw was found in the Linux kernel's soundwire component. An out-of-bounds memory access can occur within the sdwaddelementgroupcount function due to an incorrect loop condition. This error allows the system to attempt to access memory beyond its allocated buffer. Such an issue could lead to...

7.8CVSS5.5AI score0.00162EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/19 5:21 p.m.7 views

CVE-2026-75145

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

5.8CVSS0.00117EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/19 5:08 p.m.3 views

CVE-2026-72480

A flaw was found in the Linux kernel's Industrial Input/Output IIO subsystem, specifically in the Xilinx Analog-to-Digital Converter ADC AMS driver. When handling events, the amseventtochannel function could attempt to access memory outside of its allocated boundaries if a matching channel is not...

7.8CVSS5.3AI score0.00138EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 4:27 p.m.31 views

CVE-2026-75145 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

5.8CVSS0.00117EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/19 4:27 p.m.17 views

CVE-2026-75145

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

5.8CVSS5.4AI score0.00117EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/19 5:06 a.m.3 views

CVE-2026-72165

A flaw was found in the mtd: rawnand component of the Linux kernel. The nandselecttarget function contains an incorrect condition check for the 'cs' chip select parameter, allowing it to go out of its intended range. This out-of-bounds access could potentially lead to a system crash, resulting in...

7.8CVSS5.4AI score0.00164EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/18 10:17 p.m.7 views

CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

4.3CVSS0.00408EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/18 3:28 p.m.3 views

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

9.8CVSS5.5AI score0.00255EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/18 9:52 a.m.3 views

CVE-2026-72285

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine TDX Trust Domain Extensions module. A local attacker, by concurrently modifying the CPUID entry count during the initialization of a virtual machine, could cause the CPUID parsing to access memory beyond the intended...

7.8CVSS5.3AI score0.00154EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/18 12:30 a.m.7 views

EUVD-2026-60499

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

5.3AI score0.00201EPSS
SaveExploits0References4
Rows per page
Query Builder