11536 matches found
CVE-2026-110809
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...
PT-2026-115157
OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks. Attackers can supply a crafted .j2c or .jph codestream with small precinct sizes, causing the decoder to write a second row pa...
CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...
CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...
CVE-2026-110809
A security vulnerability exists in sgl-project SGLang versions up to 0.5.19 . The flaw is located in the Session Cleanup component, specifically within the Session.create_req function in the file python/sglang/srt/session/session_controller.py. Improper resource handling allows an attacker to per...
CVE-2026-86847 Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...
CVE-2026-86845
A flaw in DPDK lib/vhost vhost-crypto allows for use-after-free or type confusion in the host vhost-crypto backend. This occurs because session cleanup may leave a stale cached session pointer, and the data path fails to verify the session type before attachment. The impact is primarily related t...
ROS-20261014-73-0051
The vulnerability of the tracepointaddfunc function in the kernel/tracepoint.c module of the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-86845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type...
CVE-2026-83509
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83510
Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83505
Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-73027
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83509
An untrusted search path vulnerability in Windows Setup Files Cleanup allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-426 . While the root cause is identified as an untrusted search path, specific exploitation details are not provided ...
CVE-2026-73027
The Windows Setup Files Cleanup component is vulnerable to an elevation of privilege vulnerability due to external control of system or configuration settings. This flaw allows an authorized attacker to perform a local privilege escalation. While the impact is categorized as High for confidential...
CVE-2026-83505
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Setup Files Cleanup component. This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is categorized under CWE-367 and CWE-426 . While the risk is characterized as high, there are ...
CVE-2026-83510
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Setup Files Cleanup . This vulnerability allows an authorized attacker to achieve local privilege escalation . The security impact includes high consequences for confidentiality, integrity, and availability. While the vulnerabi...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...