6415 matches found
EUVD-2026-53272
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...
CVE-2026-64562
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...
CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...
CVE-2026-64562
CVE-2026-64562 : In the Linux kernel KVM nVMX, a shadow VMCS could be freed prematurely by free_nested() while vmcs01 still referenced it. Since this occurs asynchronously with respect to loaded_vmcs_clear(), a vCPU could migrate and __loaded_vmcs_clear() may then execute VMCLEAR. The vulnerabili...
Linux Distros Unpatched Vulnerability : CVE-2026-64562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to...
Inefficient Algorithmic Complexity
Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via...
Inefficient Algorithmic Complexity
Overview org.bouncycastle:bcprov-ext-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the FORBID_TAGS() function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify allows a attacker to execute arbitrary code.
The vulnerability of the FORBIDTAGS function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the PostCSS cascade style sheet transformation library’s instrumented library arises from the lack of protection for website structure. This allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the PostCSS cascade style sheet transformation library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the DOMPurify.sanitize() function in the JavaScript library for safe cleaning and protection of HTML code. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the DOMPurify.sanitize function in the JavaScript library for safe cleaning and protection of HTML code is related to the lack of protective measures for website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Geomap panel on the Grafana monitoring and observation platform allows a intruder to execute arbitrary code.
The vulnerability of the Geomap panel of the Grafana monitoring and observation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the HtmlPolicyBuilder class in the Java library for sanitizing HTML code from OWASP Java HTML Sanitizer allows a malicious actor to gain unauthorized access to confidential information.
The vulnerability of the HtmlPolicyBuilder class in the Java library for sanitizing HTML code from OWASP Java HTML Sanitizer is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorize...
CVE-2026-51293
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
CVE-2026-51293
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-66525
A use-after-free vulnerability exists in SQLite 3.41 when the jsonBlobAppendNode function is invoked subsequent to sqlite3DbFree being called on the aBlob member of the Parse structure...