17734 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-3928
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension ...
Linux Distros Unpatched Vulnerability : CVE-2026-3920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-3915
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-3937
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-3934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTM...
Linux Distros Unpatched Vulnerability : CVE-2026-3919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-3916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...
fs/hfsplus Component Failure
The vulnerability of the fs/hfsplus component in Linux operating systems relates to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux virt/kvm/guest_memfd.c Use-After-Free DoS
The vulnerability in the virt/kvm/guestmemfd.c component of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-31812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a...
Linux Distros Unpatched Vulnerability : CVE-2026-26127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-26127 Note that Nessus relies on the presence of the package...
Linux UFS Host Controllers DoS
The vulnerability of the ufsqcomconfigesi function in the drivers/ufs/host/ufs-qcom.c module, which supports UFS host controllers in Linux operating systems, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Mediatek wireless MT7996 Buffer Overflow DoS
The vulnerability of the mt7996tx function in the drivers/net/wireless/mediatek/mt76/mt7996/main.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
Linux Distros Unpatched Vulnerability : CVE-2026-31958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in...
Linux Distros Unpatched Vulnerability : CVE-2026-3805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. CVE-2026-3805 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2026-3783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second...
CVE-2026-26148
The CVE-2026-26148 issue affects the Microsoft Azure AD SSH Login extension for Linux, causing elevation of privilege. According to the provided metrics, the vulnerability is a LOCAL, high-severity flaw (CVSS 3.1: 8.1) with no required user interaction and no privileges required. The attack compl...
Linux Distros Unpatched Vulnerability : CVE-2025-69654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 2025-12-11,qjs interpreter usi...
Linux Distros Unpatched Vulnerability : CVE-2026-1940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but ...
Linux drivers/scsi/mpt3sas DoS
The vulnerability of the drivers/scsi/mpt3sas component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...