179 matches found
Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1791278576)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791278576 advisory. - Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in...
Exploit for CVE-2026-81642
CVE-2026-81642 — Unbound DNSKEY digest heap overflow tracking...
Intel® Slim Bootloader Advisory
Summary: Potential security vulnerabilities in the Intel® Slim Bootloader may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-28729 Description: Integer overflow in the UEFI...
CVE-2026-85501
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the algorithmic complexity vulnerabilities. NLnet Labs Unbound up to and including 1.26.0 is...
CVE-2026-39452
Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...
CVE-2026-27765
Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
CVE-2026-20878
Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20776
Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...
CVE-2026-20755
Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...
CVE-2026-20727
Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occu...
CVE-2026-20739
Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20731
Improper buffer restrictions for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...
CVE-2026-20702
Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...
CVE-2026-39452
CVE-2026-39452 is a protection mechanism failure in Intel® Transfer Learning Tool (all versions before v0.7) within Ring 3: User Applications that may allow escalation of privilege by an unauthenticated, unprivileged remote attacker via a low-complexity network attack. However, the CVSS 4.0 vecto...
CVE-2026-39452
Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...
EUVD-2026-56533
Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...
CVE-2026-32788
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit 484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-22887
The CVE-2026-22887 entry concerns Intel PROSet/Wireless WiFi Software for Windows, where improper buffer restrictions in the Ring 0 kernel may allow a denial of service. An unprivileged, unauthenticated attacker could achieve DoS with a low-complexity, adjacent-access attack and no user interacti...
CVE-2026-20913
CVE-2026-20913 describes an issue in some Intel Neural Compressor software prior to v3.7 where improper input validation in Ring 3: User Applications may allow a local privilege escalation. An unprivileged attacker with an authenticated user and low complexity could achieve escalation with no use...
CVE-2026-20878
The vulnerability CVE-2026-20878 affects Intel PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. It involves a null pointer dereference that can allow a denial-of-service condition. An unauthenticated network-adjacent attacker with low complexity could trigger...