PT-2026-24275

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

PT-2026-24276

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Windows Resilient File System ReFS. Successful exploitation may allow an authorized attacker to elevate privileges locally. The issue involv...

PT-2026-24294

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free condition exists in the Microsoft Brokering File System, potentially allowing an unauthorized attacker to elevate privileges locally. Exploitation of...

CVE-2026-23672: Out-of-bounds Read

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-25167: Use After Free

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

RockyLinux 9 : nfs-utils (RLSA-2026:3940)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3940 advisory. nfs-utils: rpc.mountd in the nfs-utils privilege escalation CVE-2025-12801 Tenable has extracted the preceding description block directly from the RockyLinux...

The vulnerability of the nfsd4_ff_proc_getdeviceinfo() function in the fs/nfsd/flexfilelayout.c module, which is part of the Linux operating system’s network file system support, allows a hacker to cause a service failure.

The vulnerability of the nfsd4ffprocgetdeviceinfo function in the fs/nfsd/flexfilelayout.c module, which is part of the NFS network file system support in Linux kernels, stems from the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause servi...

The vulnerability of the d_alloc_parallel() function in the fs/dcache.c module of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the dallocparallel function in the fs/dcache.c module of the Linux kernel’s file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fs/smb/client component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/smb/client component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CLSA-2026-1773047152 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

CLSA-2026-1773045484 kernel: Fix of 28 CVEs

fix: dm: fix dmblkreportzones CVE-2025-38141 - ice: Fix a null pointer dereference in icecopyandinitpkg CVE-2025-38664 - qed: Don't collect too many protection override GRC elements CVE-2025-39949 - drm/amd/display: Avoid a NULL pointer dereference CVE-2025-39693 - iommu/amd/pgtbl: Fix possible...

RHSA-2026:3939 Red Hat Security Advisory: nfs-utils security update

Bulletin has no description...

RHSA-2026:3940 Red Hat Security Advisory: nfs-utils security update

Bulletin has no description...

BIT-DJANGO-2026-25674 Potential incorrect permissions on newly created file system objects

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

CVE-2026-29039 changedetection.io: XPath - Arbitrary File Read via unparsed-text()

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify XPath expressions as content filters via the includefilters field. These XPath expressions are processed using the elementpath library which...

MGASA-2026-0050 Updated python-django packages fix security vulnerability

Potential incorrect permissions on newly created file system objects. CVE-2026-25674...

SICK Lector85x和SICK SICK Lector83x 安全漏洞

SICK Lector85x and SICK SICK Lector83x are a series of QR code image recognition readers developed by the German company SICK. Both devices have security vulnerabilities; these vulnerabilities stem from incomplete execution of the whitelist. Attackers could potentially access the restricted file...

The vulnerability of the `netfs_unbuffered_write_iter_locked()` function in the `fs/netfs/direct_write.c` module, which is part of the Linux kernel’s network file system support, allows a hacker to cause a service failure.

The vulnerability of the netfsunbufferedwriteiterlocked function in the fs/netfs/directwrite.c module, which is part of the Linux kernel’s network file system support, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the `make_indexed_dir()` function in the `fs/ext4/namei.c` file of the Ext4 file system’s kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the makeindexeddir function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the ext4_ext_migrate() function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...