32180 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dm raid: Fixing access issues beyond the end of the raid member array When the dm-raid table is loaded using raidctr, dm-raid allocates an array rs-devsrs-raiddisks for the raid device members. rs-raiddisks is determined by the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Fixed a memory leak when thresholdcreatebank fails. In mcethresholdcreatedevice, if thresholdcreatebank fails, the previously allocated thresholdbanks array @bp will be leaked, because the call to...
Astra Linux – Vulnerability in GhostScript
Artifex Ghostscript version 10.05.1 has a stack-based buffer overflow issue in pdfmarkcoercedest in the devices/vector/gdevpdfm.c file, due to the use of a large size value...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the QEMU disk image utility’s ‘info’ command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, resulting in denial of service or issues with...
kernel: iommu/amd: Fix clone_alias() to use the original device's devid
A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit AMD driver. The clonealias function incorrectly uses the device ID devid when handling alias devices. This can lead to the propagation of wrong or stale Device Table Entry DTE entries to alias devices, potentially...
PT-2026-91640
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...
CVE-2026-84585: Improper Access Control
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...
AZL-100806 CVE-2026-80978 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
DEBIAN-CVE-2026-80978
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
CVE-2026-80978
CVE-2026-80978 affects the Linux kernel networking subsystem, specifically the IP tunnel devices. When a local attacker stacks user-created IP tunnel devices, the derived needed_headroom can exceed the 16-bit skb header offset range, causing those offsets to wrap during skb head expansion. The fi...
CVE-2026-80978 net: cap advertised IP tunnel headroom
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
PT-2026-90108
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed headroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
CVE-2026-15418 CP210x Memory Leakage
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...
DrayTek Vigor - Command Injection
DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...
CVE-2026-69472
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
EUVD-2026-73003
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
EUVD-2026-72986
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
Windows Devices Human Interface Elevation of Privilege Vulnerability
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
ALPINE-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...