12733 matches found
PT-2026-90185
In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727 release irq lp8727 isr func, the threaded IRQ handler, is the only caller that arms pchg-work via schedule delayed work. lp8727 release irq currently cancels the work before...
PT-2026-90188
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger manager remove and the err reg extcon probe error path free each charger regulator with regulator put before tearing down the power supply sysfs...
PT-2026-90178
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040 get vcell and max17040 get soc ignore errors returned by regmap read. When an I2C transfer fails, the uninitialized register value is converted and reported to...
PT-2026-90182
In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom battmgr: terminate the strings from firmware The qcom battmgr sc8280xp strcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGR STRING LEN bytes and leaves the destinatio...
PT-2026-90181
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr rdy work, max charging time work and batt presence work. pwr rdy work and batt presence work can also queue max charging time work...
PT-2026-90179
In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so unbind runs entirely through devm. The alert IRQ handler queues the health poll delayed work, and the work reschedules itself while the chip...
PT-2026-90190
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb work before freeing the charger The USB-PHY notifier queues usb work, whose handler calls power supply changedbq-charger. The reset devm action only unregisters the notifier and was registered...
CVE-2026-89461: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040work requeues itself after every poll. canceldelayedwork only cancels a pending instance and does not wait for a callback that is already running. If syste...
CVE-2026-89468: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788chargerremove flushes chargerwork before unregistering the IRQs. An IRQ thread can queue chargerwork after flushwork has returned. The work can then run after devr...
PT-2026-90189
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power supply reference leak bq25890 fw probe acquires a reference to a secondary charger using power supply get by name, but the reference is not released on later probe failures or on driver detach. I...
CVE-2026-89474: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usbwork before freeing the charger The USB-PHY notifier queues usbwork, whose handler calls powersupplychangedbq-charger. The reset devm action only unregisters the notifier and was registered before...
CVE-2026-89463: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so unbind runs entirely through devm. The alert IRQ handler queues the healthpoll delayed work, and the work reschedules itself while the chip...
CVE-2026-89465: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwrrdywork, maxchargingtimework and battpresencework. pwrrdywork and battpresencework can also queue maxchargingtimework, while...
PT-2026-90191
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimit setup work while the threaded handler...
The vulnerability of the Microsoft Power Platform tools, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Power Platform tools is related to insufficient testing of queries on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
Vulnerabilities in Microsoft Dynamics
Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
CVE-2026-69459
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...
