PT-2026-7341

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-21237: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

PT-2026-7346

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-21242: Use After Free

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows Subsystem for Linux 资源管理错误漏洞

Microsoft Windows Subsystem for Linux WSL is a Linux subsystem under Windows developed by Microsoft. It serves as a compatibility layer that allows running native Linux binary executables in ELF format. There is a resource management vulnerability in Microsoft Windows Subsystem for Linux WSL...

The vulnerability of the hciSyncConnCompleteEvt() function in the net/bluetooth/hciEvent.c module of the Bluetooth subsystem in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the hciSyncConnCompleteEvt function in the net/bluetooth/hciEvent.c module of the Bluetooth subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...

The vulnerability of the hci_conn_del() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.

The vulnerability of the hciconndel function in the net/bluetooth/hciconn.c module of the Bluetooth subsystem in the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service failures...

CentOS 9 : kernel-5.14.0-677.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-677.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: audit: fix out-of-bounds read in auditcomparednamepath When a watch on dir=/...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

EUVD-2026-5655

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24915

CVE-2026-24915 is an out-of-bounds read vulnerability in the Huawei HarmonyOS media subsystem. Affects the media subsystem component; root cause is an out-of-bounds read that can compromise confidentiality and availability. Reported by multiple sources (NVD, CNVD, Red Hat, etc.) with consistent i...

PT-2026-6696

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An out-of-bounds read issue exists in the media subsystem. Successful exploitation of this issue can impact both the availability and confidentiality of the system. Recommendations At the moment, the...

CVE-2026-25760: Improper Limitation of a Pathname to a Restricted Directory

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path traversal / arbitrary file read issue, a...

CVE-2026-24915: Out-of-bounds Read

Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...