116089 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-77587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor before 0.4.9.11 is prone to a use-after-free and potential double free of a conflux object when a recovery leg revives a conflux set whose last linked leg h...
Linux Distros Unpatched Vulnerability : CVE-2026-77641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUXSWITCH cell fails. The return value of relaysendcommandfromedge was ignored, so a...
Security update for chromium (critical)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0293-1 Rating: critical References: 1274759 1275706 Cross-References: CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037 CVE-2026-76038 CVE-2026-76039 CVE-2026-76040 CVE-2026-76041...
Oracle Linux 9 : kernel (ELSA-2026-57252)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57252 advisory. - smb: client: validate DFS referral PathConsumed CKI Backport Bot RHEL-237668 CVE-2026-68343 - posix-cpu-timers: Prevent UAF caused by non-leader exe...
AIX : Multiple Vulnerabilities (IJ59564)
The version of AIX installed on the remote host is prior to APAR IJ59564. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59564 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102032)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102032 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adfdisablesriov The VF2PF interrupt handler queues...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001506)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001506 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: add cancelworksync for c2hcmdwork The workqueue might still be running, when the...
CVE-2026-18299
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerabili...
Linux Distros Unpatched Vulnerability : CVE-2026-18299
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Linux Distros Unpatched Vulnerability : CVE-2026-63381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbufferaddbufferreference processes ...
PT-2026-79400
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...
Linux Distros Unpatched Vulnerability : CVE-2026-74583
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers...
Oracle Linux 10 : kernel (ELSA-2026-57251)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57251 advisory. - udf: fix partition descriptor append bookkeeping CKI Backport Bot RHEL-179570 CVE-2026-45991 - crypto: pcrypt - Fix handling of MAYBACKLOG requests...
Linux Distros Unpatched Vulnerability : CVE-2026-74581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. ...
UBUNTU-CVE-2026-18299
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerabili...
CVE-2026-74439
A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...
CVE-2026-74436
A flaw was found in the Linux kernel. A synchronization issue in the rxrpc component, specifically between rxrpckernelchargeaccept and rxrpcdiscardprealloc, can lead to a use-after-free vulnerability. A local attacker could potentially exploit this flaw, causing a kernel preallocation worker to...
CVE-2026-74937
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...
