88084 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-98417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand xfrm packets whose transport header offset no longer fits after the stream pars...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130100 advisory. Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPICServerAuthContext component...
CVE-2026-98389
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switchpowerprofile during GPU reset During resume from GPU reset, the gfx idle work may invoke switchpowerprofile before the reset completes. This causes the following assert error because the register access...
CVE-2026-97381
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381
Legacy Update versions 1.12.0 through 1.13.1 are vulnerable to an origin validation error in the IsPermitted method of its ActiveX control. Due to a logic flaw, hostnames not on the permitted list fail to trigger an E_ACCESSDENIED error, causing the method to incorrectly return S_OK. An attacker ...
CVE-2026-97815
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...
CVE-2026-97798
Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-88132
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...
CVE-2026-85800
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-85354
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83916
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-83840
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83758
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-83750
Time-of-check time-of-use toctou race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83747
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-83748
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...