CVE-2026-27686: Missing Authorization

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

PT-2026-24164

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description An authenticated attacker with user privileges may be able to read Database Analyzer Log Files due to a missing authorization check within a specific RFC...

CVE-2026-24313: Missing Authorization

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-25176: Improper Access Control

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-24305

Уязвимость драйвера Windows Ancillary Function Driver for WinSock операционных систем Windows связана с использованием памяти после её освобождения. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

The vulnerability of the anx7625_i2c_probe() function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the anx7625i2cprobe function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the tg_tag_type() function in the prdbg.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the tgtagtype function in the prdbg.c component of the GNU Binutils development environment is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock developed by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilitie...

PT-2026-24358

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.1.5 contain a segmentation fault due to an invalid pointer read within the...

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stemmed from an overflow in the stack buffer of the icFixXml function, which could lead to stac...

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stems from the CIccTagNum::GetValues function, which has a stack buffer overflow issue,...

iccDEV 代码问题漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained code-related vulnerabilities. These vulnerabilities stemmed from a heap buffer overflow during the execution of the CIccMatrixMath::SetRange...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

Parse Server 安全漏洞

Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that supports Node.js. There were security vulnerabilities in versions of Parse Server prior to 8.6.13 and 9.5.1-alpha.2. These vulnerabilities stemmed from using prototype property...

The vulnerability of the flexcoppciremove() function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the flexcoppciremove function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the pci_epf_test_clean_dma_chan() function in the driver/pci/endpoint/functions/pci-epf-test.c module of the Linux operating system’s PCI device driver allows a hacker to cause a service failure.

The vulnerability of the pciepftestcleandmachan function in the driver/pci/endpoint/functions/pci-epf-test.c file of the Linux operating system’s PCI device driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `tcp_ao_finish_connect()` function in the `net/ipv4/tcp_ao.c` module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the tcpaofinishconnect function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the recv_done() function in the fs/smb/server/transport_rdma.c module of the SMB server support in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the `btrfs_load_block_group_zone_info()` function in the `fs/btrfs/zoned.c` file of the btrfs file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btrfsloadblockgroupzoneinfo function in the fs/btrfs/zoned.c file of the btrfs file system in Linux kernel affects the memory management mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...