88478 matches found
PT-2026-69859
Name of the Vulnerable Software and Affected Versions HCL BigFix Mobile affected versions not specified Description HCL BigFix Mobile is subject to information disclosure resulting from verbose error reporting and the improper handling of exceptions. This occurs when the system provides too much...
PT-2026-69610
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the stm32 dcmi media component where the dcmi graph init function registers an async notifier before the dcmi probe function toggles the reset line. If the reset contr...
PT-2026-69668
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where non-migratable faults requiring devmem incorrectly jump to the 'out' label. This behavior squashes the error code that should be returned to...
PT-2026-69796
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCSI core when drivers use the scsi schedule eh function to run the error handler. Due to a lack of enforced memory order between setting the host into err...
PT-2026-69644
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915/gem component where a memory leak occurs during proto context error handling. Specifically, after a successful BALANCE/PARALLEL SUBMIT extension during...
CVE-2026-68287: Incorrect Calculation of Buffer Size
In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes NETDMATTRPC and NETDMATTRTIMESTAMP. On 32-bit architectures without...
Linux Distros Unpatched Vulnerability : CVE-2026-68396
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler...
PT-2026-69492
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wacom parse and register function where HID hardware is started before the registration of inputs and the initialization of pad LEDs or remotes. If these subsequen...
CVE-2026-68122: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path calls ovpnpeerhold followed by schedulework&peer-tcp.deferdelwork, and the work item is already pending from the other path, schedulework...
CVE-2026-56620: Generation of Error Message Containing Sensitive Information
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...
NGINX Ingress Controller DoS
The vulnerability of the Ingress and TransportServer components of the NGINX Ingress Controller monitoring and management platform is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Network driver Windows Server Code Execution
The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ClamAV scanfd() Unauthenticated Access
The vulnerability of the scanfd function in the clamd/scanner.c file of the ClamAV antivirus program is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2026-68208: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns 0 for NULL pointer. Return -ENOMEM for devmkzalloc failure...
CVE-2026-68396: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There...
CVE-2026-68268: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error code intended to be returned to the upper layers. Fix this by...
Ladybird LibJS Code Execution
The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...
RUSTSEC-2026-0242 Safe ErrorRegistry APIs can cause undefined behavior
All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...
Safe ErrorRegistry APIs can cause undefined behavior
All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...
