No title provided

A flaw was found in AMD Zen 2-based processors, affecting components such as the kernel and Xen hypervisor. Improper isolation of shared resources within the CPU operation cache could allow an attacker to corrupt instructions executed at a different privilege level. This could potentially result ...

The vulnerability of the kernel/futex component of the Linux operating system, which allows a hacker to gain access to confidential data

The vulnerability of the kernel/futex component of the Linux operating system is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-73263: Improper Neutralization of Special Elements used in an OS Command

Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfigcontent containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfigcontainsexecauth in api/src/backend/api/v1/serializers.py checked only exec...

Debian dla-4735 : neutron-api - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4735 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/...

The vulnerability in the driver/scsi/smartpqi/smartpqi_init.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

CVE-2026-66802

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

CVE-2026-62908

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-62820

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62729

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62705

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-62690

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-62693

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-61920

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an authorized attacker to execute code over a network...

CVE-2026-61352

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56746

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...