PT-2026-92317

In handle unmap req of tipc virtio dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92357

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition exists in multiple locations, leading to a time-of-check to time-of-use TOCTOU issue. This flaw allows for local escalation of privilege,...

PT-2026-92362

In ARM64 TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92066

Name of the Vulnerable Software and Affected Versions FreeRDP server versions prior to 3.31.0 Description A use-after-free issue exists in the DRDYNVC parser. This occurs when a channel pointer is dereferenced after the synchronization lock has been released. Authenticated clients can trigger a...

CVE-2026-58716: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56923: Concurrent Execution using Shared Resource with Improper Synchronization

In handleunmapreq of tipcvirtiodev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56915: Concurrent Execution using Shared Resource with Improper Synchronization

In bigoworkerthread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56964: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92360

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a memory address after it has been freed. This...

CVE-2026-58724: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-79994: Time-of-check Time-of-use (TOCTOU) Race Condition

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

PT-2026-93141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in WebAppInstalls allows a remote attacker to spoof UI elements by using a crafted HTML page. A race condition occurs when the timing or sequence of events is unplanned...

PT-2026-91978

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description A race condition exists within the DOM: Content Processes component. A race condition is a...

PT-2026-93126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in the Network component allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a specially crafted HTML page. A...

ROS-20260915-73-0148

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

CVE-2026-92006: Buffer Copy without Checking Size of Input

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

PT-2026-97285

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.25 Apache Tomcat versions 10.1.0-M1 through 10.1.59 Apache Tomcat versions 9.0.39 through 9.0.121 Apache Tomcat versions 8.5.59 through 8.5.100 Description A race condition occurs due to improper...

kernel security, bug fix, and enhancement update

5.14.0-687.48.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2026-92014: Buffer Copy without Checking Size of Input

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16...

PT-2026-92012

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Incorrect boundary conditions exist within the Networking component. Recommendations Update...