Windows kernel Code Execution

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or enhance their privileges...

Information Disclosure

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

Linux kernel Bluetooth DoS

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

aiptekirq Heap Buffer Overflow DoS

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

CVE-2026-86940

In macOS Golden Gate 27 , a vulnerability exists that could allow an application to disclose kernel memory . This issue was addressed by removing the vulnerable code . No specific exploits or in-the-wild exploitation details are provided in the documents.

CVE-2026-86940

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory...

CVE-2026-98551

A flaw was found in the Linux kernel's Performance Events perf subsystem on ARM64 architectures. This flaw allows a local user to cause an information disclosure of sensitive kernel memory. The issue occurs because certain branch tracking data structures are not properly cleared, allowing an...

CVE-2026-98549

A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue. This issue may allow an attacker on the network to obtai...

CVE-2026-98550

A flaw was found in the TIPC Transparent Inter-Process Communication subsystem of the Linux kernel. This flaw allows an attacker to cause a Denial of Service DoS by sending unexpected or duplicate group acknowledgment messages. Due to improper validation of incoming protocol messages, an internal...

CVE-2026-98548

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service DoS or memory corruption by sending specially crafted packets containing bundled error and data chunks. This issue...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2026-98547

A flaw was found in the Linux kernel's afpacket network socket implementation. An integer overflow occurs during timeout calculations when configuring packet receive rings with large block sizes. A local user with raw network privileges can exploit this vulnerability by setting an oversized socke...

CVE-2026-98546

A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by...

CVE-2026-98542

A flaw was found in the Linux kernel's cpuset subsystem, which can lead to a denial of service DoS or compromised resource isolation. A local user with permissions to configure control groups cgroups can trigger this flaw by creating a remote partition that requests processor cores already...

CVE-2026-98545

A flaw was found in the Linux kernel's libata SCSI subsystem. When processing ATA pass-through commands to an ATAPI storage device, the kernel fails to properly validate the length byte returned in the device's sense response buffer. A malicious or faulty device can exploit this issue to trigger...

CVE-2026-98541

A flaw was found in the Linux kernel's Foo-over-UDP FOU networking subsystem. When configuring a direct encapsulation tunnel without specifying the required network protocol attribute, the kernel permits tunnel socket creation with an uninitialized protocol value. Consequently, incoming network...

CVE-2026-98544

A flaw was found in the Linux kernel's Brocade 10Gb Ethernet bna driver. During device removal or shutdown, internal timers can rearm each other and continue executing after associated driver data structures have been released. A local user with administrative privileges could exploit this race...

CVE-2026-98543

A flaw was found in the Linux kernel. A local privileged user could cause a Denial of Service DoS or file system corruption due to improper locking in the BPF Berkeley Packet Filter subsystem. When attaching sleepable BPF programs to certain file removal hooks, the kernel verifier incorrectly...

CVE-2026-98540

A flaw was found in the Linux kernel's function probe fprobe tracing component. This vulnerability can result in a Denial of Service DoS due to improper memory initialization. When tracing kernel functions, unused shadow stack space is left uncleared, causing return routines to parse leftover dat...