24716 matches found
SUSE CVE-2026-68193
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...
EUVD-2026-57195
Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...
CVE-2026-68429 drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...
PT-2026-84251
Name of the Vulnerable Software and Affected Versions @xmldom/xmldom versions prior to 0.8.14 @xmldom/xmldom versions prior to 0.9.11 xmldom versions 0.6.0 and earlier Description The Element.setAttribute function calls the private createAttributename path without validating the attribute name...
PT-2026-84252
Name of the Vulnerable Software and Affected Versions xmldom versions 0.9.0-beta.9 through 0.9.10 Description The processing-instruction production in lib/grammar.js allows a greedy S+ separator and lazy Char? data group to repeatedly repartition a long whitespace tail when the closing ? is...
SUSE CVE-2026-68352
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in ath6klwmiconnecteventrx are not validated against the buffer length. Their sum up t...
SUSE CVE-2026-68353
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in ath6klwmitxcompleteeventrx without validation against the buffer length. This allows...
SUSE CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...
CVE-2026-68339
A flaw was found in the Linux kernel's Bluetooth subsystem btusb driver. An attacker could craft a two-byte vendor event that, due to improper validation of the Realtek vendor event length in the btusbrecveventrealtek function, could lead to the system attempting to read a non-existent third byte...
CVE-2026-61347
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-59137
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56611
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126
The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...
CVE-2026-61347
CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...