23798 matches found
CVE-2026-61915
Cyrus IMAP before 3.12.4 is affected by a VPATCH BYPARAM double-free in the CalDAV worker. An authenticated calendar user can trigger a crash by sending a PATCH request with PATCH-ACTION="BYPARAM@..." against a resource that has two or more properties of the matched kind, causing the memory holdi...
Linux Distros Unpatched Vulnerability : CVE-2026-87585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v...
RHEL 8 : kernel (RHSA-2026:65711)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65711 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcievent: fix...
AlmaLinux 10 : kernel (ALSA-2026:63128)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63128 advisory. kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry...
RockyLinux 9 : kernel (RLSA-2026:64808)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...
ALSA-2026:66180 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339 kernel: crypto: pcrypt - Fix handling of...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339 kernel: crypto: pcrypt - Fix handling of...
CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding th...
The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...
CVE-2026-79907
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2026-74107
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-79907 Acrobat Reader | Double Free (CWE-415)
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-79907
Acrobat Reader is affected by a Double Free vulnerability (CWE-415) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, no privileges...
CVE-2026-79907 Acrobat Reader | Double Free (CWE-415)
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-81950
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-80080
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-77504
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-77493
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...