30616 matches found
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...
USN-8619-1: Linux kernel (HWE) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8595-3: Linux kernel (AWS) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8616-1 linux-ibm, linux-ibm-5.4 vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
OPENSUSE-SU-2026:11385-1 freerdp-3.30.0-1.1 on GA media
These are all security issues fixed in the freerdp-3.30.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11397-1 jupyter-bqplot-jupyterlab-0.5.46-15.1 on GA media
These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-15.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 10 : kernel (ELSA-2026-21557)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21557 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
OPENSUSE-SU-2026:11404-1 warewulf4-4.7.0-4.1 on GA media
These are all security issues fixed in the warewulf4-4.7.0-4.1 package on the GA media of openSUSE Tumbleweed...
libXfont2 security update
2.0.3-2.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191877 Resolves: https://redhat.atlassian.net/browse/RHEL-191928 Resolves: https://redhat.atlassian.net/browse/RHEL-191948...
OPENSUSE-SU-2026:11393-1 logcli-3.7.4-1.1 on GA media
These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
RHEL 8 : sssd (RHSA-2026:46990)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46990 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication...
The CTDB protocol has bounds checking issues
== Summary: CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. Description CTDB fails to do a number of integrity checks on received packets. This includes: checking of field lengths against pack...
PT-2026-66342
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An authenticated RDP client can cause the server-side rdpsnd channel process to terminate by advertising DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2. This configuration results in...
The vulnerability of the spring-cloud-azure-starter-active-directory-b2c component of the Microsoft Azure Spring Apps cloud service allows a perpetrator to escalate their privileges.
The vulnerability of the spring-cloud-azure-starter-active-directory-b2c component of the Microsoft Azure Spring Apps cloud service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
OPENSUSE-SU-2026:11388-1 kubernetes1.33-apiserver-1.33.13-2.1 on GA media
These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed...
Important: Red Hat Security Advisory: tigervnc security update
An update for tigervnc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
PT-2026-65673
These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed...
MiracleLinux 8 : [security - high] nodejs:24 (AXSA:2026-1352:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1352:01 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...