CVE-2026-46242

CVE-2026-46242 完全なPoCとLPE カーネル範囲 ステータス 備考 5.15.209 - 5.16 影響あり バックポート導入コミット 6.1.175 - 6.2 影響あり バックポート導入コミット 6.4 - 6.18.32 影響あり メインライン6.4でバグ導入 6.19 - 7.0.9 影響あり 最新安定版を含む v6.1ベース Pixel 8, 旧モデル 影響なし 導入コミットよりも前...

salt-security-backports

Le patch ufficiali per le versioni precedenti possono essere richieste a: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Le patch qui sono personalizzate e potrebbero differire da quelle ufficiali ⚠ Patch di sicurezza backportate per versioni di salt non supportate Le patch in questo...

CVE-2025-12543-Fix-for-Wildfly

Immagine Base WildFly 11.0.0.Final — Patch per CVE-2025-12543 Panoramica Questo repository fornisce un'immagine Docker di base costruita su WildFly 11.0.0.Final con una correzione backportata per CVE-2025-12543 , una vulnerabilità critica di validazione dell'header Host in Undertow. L'immagine è...

New-lib3mf.dll-for-MeshMixer

Nova lib3mf.dll para MeshMixer lib3mf.dll pré-compilada para MeshMixer que inclui um patch backportado para o CVE-2021-21772 e uma versão atualizada do zlib 1.3.1. Substitua o original em C:\Program Files\Autodesk\Meshmixer\ Código fonte incluído, se desejar compilá-lo você mesmo. CVE-2021-21772:...

CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

GHSA-C4C3-PG64-4M4V Mermaid configuration APIs allow prototype pollution

Summary Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge the caller-supplied configuration object into Mermaid's internal config using the assignWithDepth deep-merge helper that is vulnerable to prototype pollution. Because these APIs...

Exploit for CVE-2026-64560

CVE-2026-64560 — Linux Kernel posix-cpu-timers Non-leader exec...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

libpq security update

13.23-3 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 13.23-2 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239...

Fedora 43 : python-pillow (2026-fc2ded926e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc2ded926e advisory. Backport fixes for CVE-2026-59197 and CVE-2026-54058. ---- Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 Tenabl...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...

PYSEC-2026-3091 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

PYSEC-2026-3126 Overflow in `FusedResizeAndPadConv2D`

Impact When tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. python import tensorflow as tf mode = "REFLECT" strides = 1, 1, 1, 1 padding = "SAME" resizealigncorners = False input = tf.constant147, shape=3,3,1,1, dtype=tf.float16 size =...

PYSEC-2026-3235 Missing validation results in undefined behavior in `SparseTensorDenseAdd

Impact The implementation of tf.rawops.SparseTensorDenseAdd does not fully validate the input arguments: python import tensorflow as tf aindices = tf.constant0, shape=17, 2, dtype=tf.int64 avalues = tf.constant, shape=0, dtype=tf.float32 ashape = tf.constant6, 12, shape=2, dtype=tf.int64 b =...

PYSEC-2026-3138 Memory leak in Tensorflow

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...

libtasn1 security update

4.13-6 - Backport the fix for CVE-2025-13151 RHEL-139546...

PYSEC-2026-945 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

PYSEC-2026-989 TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite

Impact The ScatterNd function takes an input argument that determines the indices of of the output tensor. An input index greater than the output tensor or less than zero will either write content at the wrong index or trigger a crash. Patches We have patched the issue in GitHub commit...