28087 matches found
kernel: XFS data corruption using reflink
A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...
CVE-2026-64264
A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. An error handling vulnerability in the fuseuringcommit function allows a positive error code to overwrite a critical negative error, causing FUSE operations to be incorrectly reported as successful. This can lead to FU...
CVE-2026-64375
A flaw was found in the Linux kernel's proc filesystem. A local attacker with low privileges could exploit a race condition within the ptracemayaccess function when handling file descriptor links. This vulnerability arises because the system performs multiple task lookups without proper...
CVE-2026-64356
A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs during the creation of XFS metadata directories, where a failure in the creation process or a subsequent commit can lead to a memory leak. This leak results in allocated update and transaction state not being properl...
CVE-2026-64324
A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. The udffreeblocks function fails to properly validate free block extents against the partition length. This allows a local, unprivileged user to create a specially crafted UDF filesystem that, when a file on it is...
CVE-2026-64359
A flaw was found in the Linux kernel's nilfs2 filesystem. This vulnerability occurs because user-supplied segment numbers are not properly validated before processing CLEANSEGMENTS ioctl requests. An attacker, by providing out-of-range segment numbers, can trigger excessive logging. This prolonge...
grype v0.116.1
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
Linux fs/namespace.c statmount_string() Buffer Overflow DoS
The vulnerability of the statmountstring function in the fs/namespace.c file of the Linux kernel file system relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE SLES16 Security Update : runc (SUSE-SU-2026:22942-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22942-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations...
APSB26-114 : Security update available for Adobe Campaign Classic
Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution and arbitrary file system read. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...
CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
DEBIAN-CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
UBUNTU-CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943 Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943
Dompdf vulnerability (CVE-2026-59943) affects version 3.15 and earlier. In a data-URI encoded SVG, using an element with href/xlink:href pointing to local files (e.g., file:///...), the rendering process can leak filesystem information by differentiating behavior when a referenced file/directory...
EUVD-2026-50027
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...
CVE-2026-59943 Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI...