361702 matches found
CVE-2026-68189
A flaw was found in the Bluetooth hcisync component of the Linux kernel. A race condition during the UUID list traversal, caused by improper synchronization between asynchronous command sync work and UUID list updates, can lead to a use-after-free vulnerability. This could allow a local attacker ...
CVE-2026-68153
A flaw was found in the Linux kernel's libceph component. During the process of tearing down a client, the monitor client is stopped before its associated debugfs files are removed. This timing issue allows a concurrent read of the monmap debugfs file to access memory that has already been freed,...
CVE-2026-68195
A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting the mt7615 component. This vulnerability occurs because a memory-mapped I/O MMIO specific event, PKTTYPETXRXNOTIFY, is incorrectly processed on non-MMIO buses such as USB and SDIO. When this event is dispatched, it...
CVE-2026-68390
A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the hcisync component. This vulnerability occurs because the hciconnparamslookup function does not properly hold a necessary lock hdev-lock during operations. This oversight can lead to unsafe list iterations or...
CVE-2026-68158
A flaw was found in libceph within the Linux kernel. A remote attacker could send a maliciously crafted CEPHMSGOSDMAP message, leading to a multiplication overflow in the decodenewupstateweight function. This overflow causes an incorrect bounds check, which may result in out-of-bounds memory read...
CVE-2026-68273
A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...
CVE-2026-68293
A flaw was found in the net/mlx5 driver of the Linux kernel. When the driver attempts to read the MCIA register from a device advertising the mcia32dwords capability, the mlx5querymcia function can read more data than the allocated buffer can hold. This leads to a buffer overflow, which can cause...
CVE-2026-68420
A flaw was found in the Linux kernel's xfrm component. A local user could trigger a stack-out-of-bounds read by configuring an outbound Internet Protocol Security IPsec policy with optional IPsec Flow Template Specification IPTFS templates. This vulnerability can lead to a system crash, resulting...
CVE-2026-68169
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...
Windows Graphics Kernel Denial of Service Vulnerability
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network...
Windows HTTP.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...