24145 matches found
CVE-2026-23435 perf/x86: Move event pointer setup earlier in x86_pmu_enable()
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86pmuenable A production AMD EPYC system crashed with a NULL pointer dereference in the PMU NMI handler: BUG: kernel NULL pointer dereference, address: 0000000000000198 RIP:...
CVE-2026-5456
creationtimestamp| type| source ---|---|--- 2026-04-03 08:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milckx2ssm2s...
CVE-2026-35536
creationtimestamp| type| source ---|---|--- 2026-04-03 04:05:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktqoyjm523 2026-04-03 05:15:36+00:00| published-proof-of-concept| Telegram/pXUM2jaw9GgU28Sl0meXOcFoAiVepufvCfRhEfvGcf7OCXo...
CVE-2026-5452
creationtimestamp| type| source ---|---|--- 2026-04-03 04:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktizeafs2n...
DOMPurify USE_PROFILES prototype pollution allows event handlers
Summary When USEPROFILES is enabled, DOMPurify rebuilds ALLOWEDATTR as a plain array before populating it with the requested allowlists. Because the sanitizer still looks up attributes via ALLOWEDATTRlcName, any Array.prototype property that is polluted also counts as an allowlisted attribute. An...
GHSA-CJ63-JHHR-WCXV DOMPurify USE_PROFILES prototype pollution allows event handlers
Summary When USEPROFILES is enabled, DOMPurify rebuilds ALLOWEDATTR as a plain array before populating it with the requested allowlists. Because the sanitizer still looks up attributes via ALLOWEDATTRlcName, any Array.prototype property that is polluted also counts as an allowlisted attribute. An...
GHSA-GJM7-HW8F-73RQ OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
Summary Paired node escalates to gateway RCE via unrestricted node.event agent dispatch Current Maintainer Triage - Status: narrow - Normalized severity: high - Assessment: v2026.3.28 still lets paired role=node clients drive node.event agent.request into broader gateway-side tool access than nod...
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch
Summary Paired node escalates to gateway RCE via unrestricted node.event agent dispatch Current Maintainer Triage - Status: narrow - Normalized severity: high - Assessment: v2026.3.28 still lets paired role=node clients drive node.event agent.request into broader gateway-side tool access than nod...
GHSA-JJP3-MQ3X-295M Electron: Use-after-free in PowerMonitor on Windows and macOS
Impact Apps that use the powerMonitor module may be vulnerable to a use-after-free. After the native PowerMonitor object is garbage-collected, the associated OS-level resources a message window on Windows, a shutdown handler on macOS retain dangling references. A subsequent session-change event...
CVE-2026-32173
creationtimestamp| type| source ---|---|--- 2026-04-03 00:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikid3mvqm22 2026-04-03 01:16:28+00:00| seen| Telegram/iJ-TXq8dDjuzcBmcTa4J1ArjLXeEo9DZvpPvRg0iyulgok 2026-04-03 02:14:31+00:00| seen|...
PT-2026-30178
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ASYNC EVENT CMPL EVENT ID DBG BUF PRODUCER handler in bnxt async event process uses a firmware-supplied 'type' field directly as an index into bp-bs trace without bounds validation...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper setting of event pointers, potentially leading to null pointer dereferencing...
PT-2026-30167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the io uring/poll subsystem can cause a multishot recv operation to hang indefinitely when a socket send and shutdown occur in quick succession. This happens because...
PT-2026-63993
Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.3.2 Description When operating in USE PROFILES mode, the software is susceptible to prototype pollution. This occurs when attackers pollute Array.prototype properties, such as setting onclick to true, to bypass...
PT-2026-30135
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the handling of IPSec ESN Extended Sequence Number wrap events in the mlx5e driver when operating in IPSec full offload mode. After validating an ESN event, th...
PT-2026-30130
In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86 pmu enable A production AMD EPYC system crashed with a NULL pointer dereference in the PMU NMI handler: BUG: kernel NULL pointer dereference, address: 0000000000000198 RIP: x86 pe...
CVE-2026-35383
creationtimestamp| type| source ---|---|--- 2026-04-02 22:25:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikarir3qt2i...
GHSA-6C3W-7XG4-4CF7
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:23+00:00| seen| Telegram/3gsJ80xyJgAiTFZiH4SjKRBEhW5SGPUuKPeFIX1uRKbZ4...