VulnCheck KEV: CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

The vulnerability of the os.path.expandvars() function in the Python interpreter allows a hacker to trigger a service failure.

The vulnerability of the os.path.expandvars function in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the proc_readdir_de() function in the Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the procreaddirde function in the Linux operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the connect() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the connect function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `sys_perf_event_open()` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sysperfeventopen function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-32854

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2026 Description A protection mechanism failure in the Windows Shell allows an unauthorized remote attacker to perform spoofing. The issue occurs when a malicious Windows shortcut or LNK path triggers ...

The vulnerability of the amdgpu_virt_rlcg_reg_rw() function in the Linux operating system’s drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c kernel module allows a hacker to cause a service failure.

The vulnerability of the amdgpuvirtrlcgregrw function in the drivers/gpu/drm/amd/amdgpu/amdgpuvirt.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the libssh library, related to improper external management of file names or paths, allows a attacker to trigger a service failure.

The vulnerability of the libssh library is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the memfd_secret() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the memfdsecret function in the Linux operating system’s kernel relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

PT-2026-34189

Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description When OIDC OpenID Connect, an identity layer on top of the OAuth 2.0 protocol authentication fails, the full bearer token is logged in plaintext at the DEBUG level. If debug logging is enabled in...

The vulnerability of the NFSv4.0 component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the NFSv4.0 component in the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the plistlib module in the Python interpreter allows a hacker to trigger a system failure.

The vulnerability of the plistlib module in the Python interpreter is related to an uncontrolled resource consumption. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through the use of a specially crafted HTML page...

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by using a specially crafted HTML page, as a result of the...

The vulnerability of the dst_dev_rcu() function in the sk_setup_caps() file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dstdevrcu function in the sksetupcaps file of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions ah6_output_done() and ah6_output() in the Linux kernel’s net/ipv6/ah6.c file allows a attacker to cause a service failure.

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `do_unregister_framebuffer()` function in the Linux operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the dounregisterframebuffer function in Linux kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a system failure or execute arbitrary code...

The vulnerability of the tcp_rcv_state_process() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcprcvstateprocess function in the Linux operating system’s kernel is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the do_unregister_framebuffer() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...