CVE-2025-24071

CVE-2025-24071 CNA: Microsoft Corporation Publicado: 2025-03-11 Actualizado: 2025-03-13 Título: Vulnerabilidad de suplantación en el Explorador de archivos de Microsoft Windows Descripción La exposición de información confidencial a un actor no autorizado en el Explorador de archivos de Windows...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

CVE-2026-16006

CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...

CVE-2026-76967

creationtimestamp| type| source ---|---|--- 2026-09-08 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxwh5e3xh2b...

CVE-2026-58240

creationtimestamp| type| source ---|---|--- 2026-09-08 00:48:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3muxsgolk5j2r 2026-09-08 02:07:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muxwszdd352g 2026-09-08 04:02:24+00:00| seen|...

CVE-2026-86542

creationtimestamp| type| source ---|---|--- 2026-09-08 00:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpux7hsz22 2026-09-08 10:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muyrs6o7z42n...

PT-2026-88705

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-88690

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-88553

Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

VulnCheck KEV: CVE-2017-5753

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...

PT-2026-88504

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

Linux Distros Unpatched Vulnerability : CVE-2026-69806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-69806 Note that Nessus...

CVE-2026-82586

creationtimestamp| type| source ---|---|--- 2026-09-07 23:14:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4cp73nxikwbso...

CVE-2026-86437

creationtimestamp| type| source ---|---|--- 2026-09-07 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7j7akxumrsw6e...

CVE-2026-80166

creationtimestamp| type| source ---|---|--- 2026-09-07 22:02:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxj5lsruy2v...

CVE-2026-86482

creationtimestamp| type| source ---|---|--- 2026-09-07 22:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxj5f3cc523...

CVE-2019-6207

CVE-2019-6207 esta vulnerabilidad puede ser desencadenada en el sandbox en macOS wop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the pro...

MAL-2026-16016 Malicious code in cv-train (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63e889d2bfc807902ef5bcd86b6d65b95272587726dda61e4efb63d461fc3b setup.py defines a phonehome function invoked at module top level, so it runs during pip install. The function collects the machine hostname, usernam...

CVE-2026-86478

creationtimestamp| type| source ---|---|--- 2026-09-07 18:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mux3z4eb5a25 2026-09-07 19:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117231296587754066 2026-09-07 19:00:28+00:00| seen|...