203041 matches found
DEBIAN-CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
CLSA-2026-1791569661 Fix CVE(s): CVE-2026-19445, CVE-2026-4786
SECURITY UPDATE: use-after-free in server-side SSL SNI callbacks - debian/patches/CVE-2026-19445.patch: stop using a borrowed SSLContext callback argument, retain the current context and callback during SNI dispatch, and unregister the callback before context teardown; add regression tests for...
CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
CVE-2026-112036 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
CVE-2026-112036 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
EUVD-2026-104029
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
CVE-2026-112036
The Artifex MuPDF software (up to version 1.28.5 ) contains a double free vulnerability in the Signature Locking component. The flaw exists within the free_char_list function located in the file source/pdf/pdf-xref.c. This issue can be triggered remotely through specific manipulation, potentially...
CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
UBUNTU-CVE-2026-98699
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mesh fast xmit path deletion UAF meshfasttxcache stores raw meshpath pointers. Path deletion flushes the cache and then frees the path with kfreercu, but a lookup that already holds the path can insert a new...
UBUNTU-CVE-2026-98708
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep paired old chanctx alive An in-place replacement keeps reciprocal replacectx pointers between the old WILLBEREPLACED chanctx and the new REPLACESOTHER chanctx. However, the early free paths only consider...
UBUNTU-CVE-2026-98739
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial port reference race For RFCOMMRELEASEONHUP devices, rfcommttyinstall and rfcommreleasedev both use RFCOMMTTYOWNED to decide who drops the initial ttyport reference. The release path tests the bit...
UBUNTU-CVE-2026-98772
In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down use-after-free Some drivers for multiport devices access port driver data from completion handlers of shared URBs submitted at attach or first open and stopped at disconnect or last close,...
UBUNTU-CVE-2026-98855
In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds addchangesetproperty links a new property of a not-yet-live target node into the node's deadprops list before handing it to ofchangesetaddproperty. If that...
Linux Distros Unpatched Vulnerability : CVE-2026-98459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: balance the parent hold in hcibindbis hciconnlink takes a lifetime reference to its parent with hciconnget, but only takes an operational hold o...
RHEL 8 : webkit2gtk3 (RHSA-2026:84584)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84584 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...
Linux Distros Unpatched Vulnerability : CVE-2026-98517
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/uvmm: fix UAF in nouveauuvmmsm when BO is in TTMPLSYSTEM nouveauuvmmsm calls opmap, which passes bo-resource through nouveaumem to nouveauuvmamap...
Linux Distros Unpatched Vulnerability : CVE-2026-98501
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: alps: fix use-after-free on input2 registration failure alpsinputconfigured stores data-input2 before calling inputregisterdevice. If registration fails,...
Linux Distros Unpatched Vulnerability : CVE-2026-112036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature...
CVE-2025-60482
A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2025-60482
A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...