CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23339

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on ncitransceive early error paths ncitransceive takes ownership of the skb passed by the caller, but the -EPROTO, -EINVAL, and -EBUSY error paths return without freeing it. Due to issues clearing NCIDATAEXCHAN...

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23330

Summary: CVE-2026-23330 affects the Linux kernel NFC/NCI subsystem. The issue arises in nci_close_device() where pending data exchanges may not be completed before closing, allowing a leaking unreferenced socket object (example: 0xff1100000f435000, size 2048) and associated references. This could...

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23330 nfc: nci: complete pending data exchange on device close

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

CVE-2026-23330 nfc: nci: complete pending data exchange on device close

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

tar-rs incorrectly ignores PAX size headers if header size is nonzero

...

CVE-2026-2343

creationtimestamp| type| source ---|---|--- 2026-03-25 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116288640066659181 2026-03-25 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhukz3ljse2i 2026-03-25 10:05:16+00:00| seen|...

CVE-2026-28859

creationtimestamp| type| source ---|---|--- 2026-03-25 07:28:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116288631079391237 2026-03-27 04:46:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116299318674903445...

CVE-2026-28858

creationtimestamp| type| source ---|---|--- 2026-03-25 06:20:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116288365225347899 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/ 2026-04-06 18:00:04+00:00| seen| https://t.me/GithubRedTeam/79...

PT-2026-27788

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco Secure Firewall Adaptive Security Appliance ASA Software affected versions not specified Cisco Secure Firewall Threat Defense FTD...

What Microsoft's EWS Retirement Means for Your Veeam Backups

Updated September 2026 This article has been revised to reflect: Microsoft's October 1, 2026 enforcement timeline. The introduction of the EWSAllowedAppIDs allow list. The current status of Veeam's transition to Microsoft Graph. Customers who have previously read this article are advised to revie...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from incomplete data exchange during the shutdown of devices, potentially leading to memory leaks...

Cisco多款产品 安全漏洞

Cisco IOS, etc. are products of the American company Cisco. Cisco IOS is an operating system developed for their network devices. Cisco Secure Firewall Adaptive Security Appliance is a enterprise-level firewall software. Cisco IOS XE Software is a network operating system. Several Cisco products...

EUVD-2026-15003

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-24141

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a specially crafted input file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-20687

creationtimestamp| type| source ---|---|--- 2026-03-24 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77047 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-25 03:00:31+00:00| seen|...

CVE-2025-33244

creationtimestamp| type| source ---|---|--- 2026-03-24 16:07:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116285009080786075 2026-03-24 22:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlakxhs62p 2026-03-24 22:06:51+00:00| seen|...

CLSA-2026-1774366569 Fix CVE(s): CVE-2026-3497

SECURITY UPDATE: pre-auth crash via GSSAPI key exchange - debian/patches/CVE-2026-3497.patch: replace sshpktdisconnect with sshpacketdisconnect and initialize gssbufferdesc variables in kexgssc.c, kexgsss.c. - CVE-2026-3497...