40143 matches found
EUVD-2026-58904
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...
CVE-2026-72146
CVE-2026-72146 concerns the Linux kernel dmaengine rz-dmac issue. In the fix, the interrupt request is moved to occur after full setup, preventing the IRQ handler from accessing channel->ch_base before initialization and the IRQ thread from touching uninitialized data (ld_free, ld_queue, ld_ac...
EUVD-2026-58811
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
PT-2026-73054
siyuan versions = 3.7.3 fixed in v3.7.4 contain a server-side template injection vulnerability in the attribute-view Template calculation feature introduced in v3.7.0-beta.1. The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and...
PT-2026-73026
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine: idxd component within the idxd cdev open function. During file-device setup failure in the failed dev add and failed dev name paths, the system drops th...
Chromium: CVE-2026-19560 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...
CVE-2026-69414
Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the csinsnname lookup in arch/M68K/M68KInstPrinter.c and arch/RISCV/RISCVMapping.c. An attacker can crash the process by supplying an invalid instruction ID to csinsnname on an M68K or RISCV handle. On M68K, the...
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Improper Neutralization of Special Elements Used in a Template Engine
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the find filter in email-action parameters such as subject, body, to...
MINI-RPG2-W5CX-H3PX
Bulletin has no description...
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak "...
CVE-2026-72827
Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...
Malicious code in @zzzgenesis00/web3-provider-engine (npm)
Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while shipping a postinstall.js that runs automatically on npm...
WordPress Astro Booking Engine plugin <= 1.4.0 - Cross-Site Request Forgery to Settings Reset vulnerability
Cross-Site Request Forgery to Settings Reset vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Astro Booking Engine versions = 1.4.0...
GO-2025-3764 vulnerabilities
Vulnerabilities for packages: nuclei...