3482 matches found
CVE-2026-73614
Network-AI ClaudeHookBridge prior to 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code uses the full untruncated command. This discrepancy permits attackers to place dangerous content beyond the 500-byte threshold in a Bash command field to byp...
CVE-2026-73614 Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation
Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...
CVE-2026-73614 Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation
Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu
A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...
Linux Distros Unpatched Vulnerability : CVE-2026-19730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt...
PT-2026-71717
Name of the Vulnerable Software and Affected Versions Podman version 5.8.x Description The podman quadlet install --replace command fails to truncate existing destination files when opening them with O CREATE|O WRONLY without O TRUNC. On filesystems that do not support reflinks, such as many...
podman -- podman quadlet install --replace does not fully replace the old file
The Podman developers report: When running podman quadlet install --replace to replace a Quadlet file, if the original Quadlet is larger than the new Quadlet, the file would not be truncated and content from the original would be preserved...
ROS-20260813-73-0052
The vulnerability in uriparser is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
RockyLinux 10 : kernel (RLSA-2026:54343)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54343 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...
RHEL 9 : kernel (RHSA-2026:54443)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54443 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed intege...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu
A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...
ALSA-2026:54343 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 kernel: scsi: target:...
RHEL 10 : kernel (RHSA-2026:54343)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54343 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integ...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...