Malicious code in global-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5449036ad6a1bf0ee192023ddb23ea7afefe53da7133ab91f4ffbc6d3253f5dc package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identity and OS files from the installer —...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

EUVD-2026-57422

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-18952

Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.

SUSE CVE-2025-31936

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

SUSE CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-12232

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...

EUVD-2026-57066

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...

CVE-2026-12232

The CVE concerns the Intel ALH DAI driver in Zephyr. The function dai_alh_get_properties() uses a caller-supplied stream_id without proper bounds checks, indexing a fixed 64-entry alh_handshake_map and potentially reading beyond the intended range. This results in a one-byte-per-call arbitrary-of...

CVE-2026-12232 Out-of-bounds read via unvalidated stream_id in Intel ALH DAI get_properties

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...

CVE-2026-12232 Out-of-bounds read via unvalidated stream_id in Intel ALH DAI get_properties

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...

Intel PROSet/Wireless WiFi Software Advisory - Lenovo Support US

No description provided...

Linux Distros Unpatched Vulnerability : CVE-2026-20917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-20901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...

Linux Distros Unpatched Vulnerability : CVE-2026-20760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of...