Exploit for Type Confusion in Apple Safari

CVE-2024-23222 PoC - Write-up: https://jamezx32.github.io/...

SUSE-SU-2026:4656-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...

Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)

Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-59313 DESCRIPTION: Spring MVC applications using the functional web framework are vulnerable to stream corruption...

FreeBSD Security Advisory - FreeBSD-SA-26:71.sound

FreeBSD Security Advisory - TOCTOU race between sound4 buffer resizing and mmap. An unprivileged local user with access to a sound device can exploit this race to trigger a use-after-free in the kernel, potentially escalating privileges...

PT-2026-114301

Name of the Vulnerable Software and Affected Versions DPDK versions prior to 25.11.4-1.1 Description A TOCTOU Time-of-Check to Time-of-Use double-fetch of control-queue descriptors in the lib/vhost library leads to a heap buffer overflow. This occurs within the VDUSE control-queue handler, allowi...

VulnCheck KEV: CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

CVE-2026-86848: Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend...

CVE-2026-86562: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-93683: Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...

CVE-2026-102354: Time-of-check Time-of-use (TOCTOU) Race Condition

BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate, as used by isValidCertificateUrl and isValidTsaUrl, separately from the outbound fetchtargetUrl,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130113 advisory. rsync before3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated client...

FreeBSD -- TOCTOU race between sound(4) buffer resizing and mmap

Problem Description: When an audio channel's buffer needs to be resized, the sound4 driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer. An mmap2 call on another thread can complete during this window, after which the resize path frees the...

FreeBSD-SA-26:71.sound

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:71.sound Security Advisory The FreeBSD Project Topic: TOCTOU race between sound4 buffer resizing and mmap Category: core Module: sound Announced: 2026-10-14...

Linux Distros Unpatched Vulnerability : CVE-2026-86562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDU...

MiracleLinux 9 : kernel-5.14.0-687.46.1.el9_8 (AXSA:2026-2036:97)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2036:97 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr...

CVE-2026-62840

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

RHLW-2026-FD244C7EA4E4E9E4 Lightwell Security Advisory: cxf-rt-rs-security-oauth2 3.6.9.rhlw-00003

Red Hat Lightwell has released org.apache.cxf:cxf-rt-rs-security-oauth2 3.6.9.rhlw-00003 with backported fixes for CVE-2026-50623, CVE-2026-50627, CVE-2026-50628, CVE-2026-50629, CVE-2026-50630, CVE-2026-50631, CVE-2026-57818, CVE-2026-61466, CVE-2026-63687, CVE-2026-68079, and CVE-2026-68481...

EUVD-2026-100608

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62840

CVE-2026-62840 is an elevation of privilege vulnerability affecting the Linux Kernel . The flaw is caused by a Time-of-check Time-of-use (TOCTOU) race condition , which allows an authorized attacker to escalate privileges locally. Exploitation details and specific affected versions are not provid...