Lucene search
+L

172983 matches found

Debian CVE
Debian CVE
added 5 days ago9 views

CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

8.2CVSS5.4AI score0.00317EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago15 views

CVE-2026-64577

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

7.5CVSS5.5AI score0.00537EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago7 views

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

7.1CVSS5.3AI score0.00116EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

7.8CVSS5.3AI score0.00118EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

7.8CVSS5.4AI score0.00116EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-64573

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLVTYPENVM branch of qcatlvcheckdata the tag loop bound is "while idx length - sizeofstruct tlvtypenvm". "length" is a signed int from the firmware TLV header and...

5.5AI score0.00156EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-64572

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...

5.3AI score0.00186EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago9 views

CVE-2026-64569

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

5.3AI score0.00156EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago7 views

CVE-2026-64570

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix filsdiscovery double free on alloc failure ieee80211setfilsdiscovery calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...

7.8CVSS5.3AI score0.00152EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-64567

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...

7.8CVSS5.2AI score0.0012EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago6 views

CVE-2026-64566

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFLSHAREDFRAG in iptfsskbaddfrags When iptfsskbaddfrags copies frag references from the source frag walk into a new SKB, it increments the page reference count via skbfragref but does not propagate...

9.8CVSS5.4AI score0.00352EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-67592

Removed by vendor...

7.5CVSS5.4AI score0.00478EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-67591

Removed by vendor...

6.5CVSS5.4AI score0.00421EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago8 views

CVE-2026-67590

Removed by vendor...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago9 views

CVE-2026-67589

Removed by vendor...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago9 views

CVE-2026-67588

Removed by vendor...

7.5CVSS5.4AI score0.00483EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago10 views

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

6CVSS5.5AI score0.00253EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago9 views

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

6CVSS5.7AI score0.00252EPSS
SaveExploits0
Debian CVE
Debian CVE
added 5 days ago7 views

CVE-2026-71190

In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...

8.7CVSS5.6AI score0.00466EPSS
SaveExploits0
Chainguard
Chainguard
added 5 days ago17 views

GHSA-MX64-MJ3Q-7PRJ vulnerabilities

Vulnerabilities for packages: dapr, dapr-fips...

5.2AI score
SaveExploits0
Rows per page
Query Builder