Lucene search
+L

76142 matches found

RedHat Linux
RedHat Linux
added 2026/07/24 4:1 p.m.43 views

kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

A flaw was found in the Linux kernel. Specifically, within the drm/xe graphics driver, two error handling issues in the xeexecqueuecreateioctl function could lead to memory corruption. This could result in a dangling pointer or a use-after-free vulnerability. A local attacker could potentially...

7.8CVSS5.8AI score0.0014EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/07/24 3:52 p.m.10 views

Information Exposure

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Information Exposure via the GraphQL error message handling process. An attacker can obtain the names of required custom inp...

6.3CVSS5.9AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/24 3:31 p.m.8 views

EUVD-2026-48658

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

5.7AI score0.00165EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/24 3:27 p.m.18 views

CVE-2026-64242

In the Linux kernel, the net2280 USB gadget driver fix eliminates a double-free in the probe error path. The gadget_init registers gadget_release() as the release callback; net2280_remove() tears down the device and drops the gadget reference with usb_put_gadget(). A subsequent kfree(dev) could f...

5.7AI score0.00165EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/24 3:27 p.m.12 views

CVE-2026-64242

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

5.7AI score0.00165EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
added 2026/07/24 3:27 p.m.9 views

EUVD-2026-48651

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

5.7AI score0.00165EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/24 3:27 p.m.30 views

CVE-2026-64242 usb: gadget: net2280: Fix double free in probe error path

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

0.00165EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/24 3:27 p.m.7 views

CVE-2026-64242 usb: gadget: net2280: Fix double free in probe error path

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

5.7AI score
SaveExploits0References11
OSV
OSV
added 2026/07/24 3:23 p.m.8 views

CVE-2026-64227 ACPI: driver: Check ACPI_COMPANION() against NULL during probe

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...

5.8AI score
SaveExploits0References7
EUVD
EUVD
added 2026/07/24 3:23 p.m.9 views

EUVD-2026-48634

In the Linux kernel, the following vulnerability has been resolved: schedext: Avoid UAF in scxrootenableworkfn init failure path In scxrootenableworkfn, puttaskstructp is called before scxerror dereferences p-comm and p-pid. If the iterator's reference is the last drop, the task is freed...

5.7AI score0.00129EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/24 3:23 p.m.33 views

CVE-2026-64227 ACPI: driver: Check ACPI_COMPANION() against NULL during probe

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...

0.00168EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/24 3:23 p.m.7 views

EUVD-2026-48631

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211tidtolinkmapsizeok validates negotiated TTLM elements against the number of link-map entries indicated by linkmappresence. ieee80211parsenegttlm must consume the...

5.8AI score0.00256EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/24 3:23 p.m.14 views

CVE-2026-64222

CVE-2026-64222 affects the Linux kernel on OcteonTX2/CN20K: a double-free in pool->stack during AQ pool init cleanup. The otx2_pool_aq_init() path frees pool->stack on mailbox sync/retry failure but doesn’t null the pointer, causing otx2_sq_aura_pool_init() cleanup (via otx2_aura_pool_free(...

7CVSS5.8AI score0.00122EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/24 3:23 p.m.9 views

EUVD-2026-48629

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...

5.9AI score0.00126EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/24 3:15 p.m.13 views

EUVD-2026-42364

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/07/24 2:23 p.m.18 views

ImageMagick: Use-After-Free when freetype initialization fails

When the freetype initialization fails the method does not exit and uses memory that was freed...

5.8AI score
SaveExploits0References3Affected Software17
Microsoft CVE
Microsoft CVE
added 2026/07/24 2:0 p.m.12 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS5.8AI score0.00212EPSS
SaveExploits0
NVD
NVD
added 2026/07/24 1:18 p.m.10 views

CVE-2026-66009

Parse Server versions = 9.0.0 before 9.10.0-alpha.5 and = 8.2.2 before 8.6.86 return GraphQL validation error messages that name required custom input fields even when public introspection is disabled graphQLPublicIntrospection: false, the default. A client holding only the public application id ...

6.3CVSS0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/24 12:7 p.m.34 views

CVE-2026-66009 Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Parse Server versions = 9.0.0 before 9.10.0-alpha.5 and = 8.2.2 before 8.6.86 return GraphQL validation error messages that name required custom input fields even when public introspection is disabled graphQLPublicIntrospection: false, the default. A client holding only the public application id ...

6.3CVSS0.00263EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/24 11:19 a.m.8 views

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

4.7CVSS5.8AI score0.00095EPSS
SaveExploits0References5
Rows per page
Query Builder