87832 matches found
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()
A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()
A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...
kernel: net: guard timestamp cmsgs to real error queue skbs
A flaw was found in the Linux kernel's networking component. This vulnerability allows a remote attacker to potentially access sensitive information or cause system instability. By sending specially crafted network packets, an attacker can exploit an issue in how the kernel handles timestamping f...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
Important: Red Hat Security Advisory: xmlrpc-c security update
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component
A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...
PT-2026-87478
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87614
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
ROS-20260908-73-0046
The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87466
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
CVE-2026-69513: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69684: Generation of Error Message Containing Sensitive Information
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-69450: Out-of-bounds Read
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87507
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
PT-2026-88227
Name of the Vulnerable Software and Affected Versions AccountsDb.java affected versions not specified Description A logic error exists in the findMetaAuthUid function within AccountsDb.java, which may allow a Factory Reset Protection FRP bypass. FRP is a security feature that prevents unauthorize...
CVE-2026-28660: Protection Mechanism Failure
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-68894: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69436: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally...
Important: xmlrpc-c security update
XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...