672 matches found
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier...
GO-2023-2102 vulnerabilities
Vulnerabilities for packages: tekton-chains, timoni, amass, dgraph, k3d, secrets-store-csi-driver, kubernetes-ingress-defaultbackend, nats, nodetaint, hey, prometheus-operator, zot, dex, k3s, bank-vaults, bom, terraform, cosign, kubeflow, caddy, kubernetes-dns-node-cache, pulumi-language-dotnet,...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: tekton-chains, falcoctl, slsa-verifier, melange, neuvector-sigstore-interface, tkn, wolfictl, skaffold, kubescape, zot, vexctl, policy-controller, spire-server, goreleaser, gitsign, flux-source-controller, apko, ko, zarf, aactl...
Linux Distros Unpatched Vulnerability : CVE-2026-6727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may b...
CVE-2026-64934
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...
CVE-2026-71331
Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
CVE-2026-66802
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
EUVD-2026-56771
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
EUVD-2026-56746
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
DEBIAN-CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
DEBIAN-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
UBUNTU-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...
UBUNTU-CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...