87781 matches found
kernel: net: guard timestamp cmsgs to real error queue skbs
A flaw was found in the Linux kernel's networking component. This vulnerability allows a remote attacker to potentially access sensitive information or cause system instability. By sending specially crafted network packets, an attacker can exploit an issue in how the kernel handles timestamping f...
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()
A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component
A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...
Important: Red Hat Security Advisory: xmlrpc-c security update
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
PT-2026-87478
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87614
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
ROS-20260908-73-0046
The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87466
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
CVE-2026-69513: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69684: Generation of Error Message Containing Sensitive Information
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-69450: Out-of-bounds Read
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87507
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
CVE-2026-28660: Protection Mechanism Failure
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-68894: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-78512: Numeric Truncation Error
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...