55600 matches found
CVE-2026-53371
A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...
CVE-2026-64121
A flaw was found in the Linux kernel's Intermediate Functional Block ifb network device. A local user with network configuration privileges can trigger a slab-out-of-bounds read by configuring an asymmetric ifb device and querying its ethtool statistics. This vulnerability can lead to a kernel...
CVE-2026-64106
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architecture, specifically within the virtual Generic Interrupt Controller vgic-its module. A local user in userspace can restore an Interrupt Translation Service ITS Device Table Entry DTE with a size field that...
MINI-V2V9-R796-CV3P
Bulletin has no description...
MAL-2026-10857 Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19008091c460cf10b254f3077108bad3b1c5289e85ae59ba7b873aff7d96866d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10860 Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58e0b7489bb5ef9967ddda5eb651a0a399c73ae03e692909f34f864b189bde46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10834 Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3356b51b55d6905b43444e0ce3552d56ad9af93ba2e040b8ba6a3e80da9a86bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10808 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b99be8fcb87a9c06989edb3b62e804fa2ebea83cd48b65eeac6b57f1636629 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2026-63893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Reject u32 wrap in tbpropertyentryvalid entry-value is u32 and entry-length is u16; the sum is performed in u32 and wraps. A malicious...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-64112
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rbd: eliminate a race in lockdwork draining on unmap Given how rbdlockaddrequest and rbdimgexclusivelock are written, lockdwork may be requeued more than it's...
Linux Distros Unpatched Vulnerability : CVE-2026-64103
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in iscihostalloc drivers/scsi/isci/init.c:496 and scheduled fro...
Linux Distros Unpatched Vulnerability : CVE-2026-63977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dpll: zl3073x: use dplldevicechangentf and remove changework The changework was introduced t...
Linux Distros Unpatched Vulnerability : CVE-2026-63821
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM,...
Linux Distros Unpatched Vulnerability : CVE-2026-63990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtu...
Cisco ASA/FTD Web Services Infinite Loop (CVE-2024-20353)
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...
Linux Distros Unpatched Vulnerability : CVE-2026-63861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe...
Linux Distros Unpatched Vulnerability : CVE-2026-64131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exclusive entries are only supported for anonymous folios. This...
