12411 matches found
CVE-2026-23228
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of activenumconn in ksmbdtcpnewconnection On kthreadrun failure in ksmbdtcpnewconnection, the transport is freed via freetransport, which does not decrement activenumconn, leaking this counter. Replace...
Exploit for Use After Free in Google Chrome
CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of kthreadrun and the lack of decrementing activenumconn, potentially leading to...
Linux Distros Unpatched Vulnerability : CVE-2026-23228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: server: fix leak of activenumconn in ksmbdtcpnewconnection On kthreadrun failure in ksmbdtcpnewconnection, the transport is freed via freetransport, which...
CVE-2024-36319
Debug code left active in AMD's Video Decoder Engine Firmware VCN FW could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system...
Intel Active Management Technology Memory Read Unauthorized Access
The vulnerability of Intel Active Management Technology AMT and Intel Standard Manageability ISM is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Intel Active Management Technology Pointer Manipulation DoS
The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to pointer manipulation. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...
Intel Active Management Technology Buffer Overflow DoS
The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
CVE-2026-23198
In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deassigning a KVMIRQFD, don't clobber the irqfd's copy of the IRQ's routing entry as doing so breaks kvmarchirqbypassdelproducer on x86 and arm64, which explicitly...
PT-2026-8094
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The reported issue has been marked as rejected by NIST in the official CVE List, indicating it is not a valid or recognized vulnerability. No search results fro...
PT-2026-23031
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description Mattermost does not consistently handle error responses when processing the /mute command. This allows an authenticat...
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50347: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost bsc1249928. CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time bsc1252542...
Active Directory Attacks Demystified: Pass-the-Hash (PtH), Pass-the-Ticket (PtT), and Beyond
Key Takeaways Active Directory attacks are identified as a significant threat in enterprise environments, with 74% of breaches involving compromised identities according to the Verizon DBIR 2025. Pass-the-Hash PtHattacks facilitate lateral movement by allowing the reuse of stolen NTLM hashes...
Exploit for Protection Mechanism Failure in Microsoft
CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnera...
CVE-2025-20080
Null pointer dereference in the firmware for some IntelR AMT and IntelR Standard Manageability within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...
CVE-2025-32008
Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...
CVE-2025-32008
CVE-2025-32008 concerns a firmware out-of-bounds write in Intel AMT and Intel Standard Manageability (Ring 3). A network-based, unauthenticated, low-complexity adversary could trigger a denial of service with no user interaction. Impact is high availability; confidentiality and integrity are list...
CVE-2025-20080
CVE-2025-20080 affects firmware for Intel AMT and Intel Standard Manageability. Root cause: null pointer dereference in Ring 0 firmware leading to denial of service. A network attacker with unauthenticated access and high attack complexity may exploit this without user interaction, potentially im...
Security Bulletin: Vulnerability in sssd library (CVE-2025-11561) affects Power HMC.
Summary The sssd library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-11561 DESCRIPTION: A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In defaul...
When SPNs Go Rogue: Detection and Remediation with Trellix NDR
When SPNs Go Rogue: Detection and Remediation with Trellix NDR By Maulik Maheta and Henry Bernabe · February 10, 2026 Executive summary Service Principal Names SPNs are essential for Kerberos authentication in Active Directory AD, but misconfigurations, such as assigning SPNs to standard user...