11189 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-87446
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...
The vulnerability of the ethnl_act_module_fw_flash() function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the ethnlactmodulefwflash function in the net/ethtool/module.c module, which implements networking functions in the Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the ipv4_sysctl_exit_net() function in the net/ipv4/sysctl_net_ipv4.c module of the IPv4 protocol implementation in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ipv4sysctlexitnet function in the net/ipv4/sysctlnetipv4.c module of the IPv4 protocol implementation in Linux’s kernel relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the...
Linux Distros Unpatched Vulnerability : CVE-2026-87549
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...
CVE-2026-86748: Improper Cleanup on Thrown Exception
Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism...
CVE-2026-69289
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
EUVD-2026-73438
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
kernel: vfio/pci: Clean up DMABUFs before disabling function
A flaw was found in the Linux kernel's vfio/pci subsystem. During device shutdown, an improper order of operations in cleaning up Direct Memory Access Buffers DMABUFs before disabling the function creates a brief window. In this window, a device's Base Address Registers BARs could still be access...
EUVD-2026-72719
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
SUSE CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-69289: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
PT-2026-87336
Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At th...
PT-2026-88546
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incomplete cleanup in Extensions allows a remote attacker to bypass system access restrictions through the use of a crafted Chrome extension and social engineering. Recommendations Upda...
PT-2026-88536
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incomplete cleanup in the Browser component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from o...
PT-2026-88649
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incomplete cleanup in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit ...
The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.
The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...