91 matches found
CVE-2026-20489
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...
CVE-2026-20489
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...
CVE-2026-20477
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...
CVE-2026-20475
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...
RHEL 9 : kernel (RHSA-2026:30848)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:30848 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip...
CVE-2026-20427
In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537...
CVE-2026-20442
MediaTek Chipsets are vulnerable to a use after free flaw within the display component. This security issue can lead to a system crash , resulting in a local denial-of-service (DoS) condition. Exploitation requires the attacker to already possess System privilege , and no user interaction is requ...
CVE-2026-25491 Craft has a Stored XSS in Entry Types Name
Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22...
MiracleLinux 7 : openssh-7.4p1-23.0.3.0.3.el7.AXS7 (AXSA:2025-10789:04)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10789:04 advisory. CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory...
CVE-2025-20781
A memory corruption vulnerability exists in MediaTek chipsets due to a use after free (or reuse after release) flaw in the display component. This vulnerability could allow a malicious actor who has already obtained System privileges to achieve a local escalation of privilege . Exploitation does ...
PT-2026-1370
Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184061 Description A memory corruption issue exists in display due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...
PT-2026-1374
Name of the Vulnerable Software and Affected Versions versions prior to ALPS10182882 Description A memory corruption issue exists in display due to uninitialized data. Successful exploitation could allow a malicious actor with System privileges to escalate their privileges locally. User interacti...
The vulnerability of the Downloads Panel component of the Mozilla Firefox browser and the Thunderbird email client allows attackers to perform spear-phishing attacks.
The vulnerability of the Downloads Panel component in the Mozilla Firefox browser and the Thunderbird email client is related to deficiencies in the authentication process, resulting from incorrect display of the domain name in the address bar. Exploiting this vulnerability allows a malicious act...
CVE-2025-20777
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4752...
CVE-2025-20777
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4752...
CVE-2025-20766
A memory corruption vulnerability exists in MediaTek Chipsets due to improper input validation within the display component. This flaw could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . No user interaction is required for exploitat...
CVE-2025-55127
The Revive Adserver (version 6.0.2 ) is vulnerable to an improper neutralization of whitespace (CWE-156) when creating new users. Because the system fails to strip leading or trailing spaces from usernames, an attacker can create an account with a name like " admin" which appears visually indisti...
EUVD-2017-16800
Malware in sbrugna...