275070 matches found
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
DEBIAN-CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
UBUNTU-CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-43499-OnePlus15
CVE-2026-43499 — OnePlus 15 LPE（教育用PoC） 警告： このリポジトリは教育および研究目的のみ で提供されています。 ビルド済みのバイナリやリリースは配布されていません。すべてソースからビルドする必要があります。 OnePlus 15向けのAndroid 16ローカル権限昇格。 kallsymsアライメント修正と確認済みOnePlus 15プロファイルを含むx-spy/CVE-2026-43499-popsicleのフォーク。 プロファイル...
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock 15年前のGhostLockの脆弱性がほとんどのLinuxディストリビューションでルート権限取得とコンテナエスケープを可能にする GhostLock は、Linuxカーネルのrtmutex サブシステムにおける高深刻度のUse-After-Free UAF脆弱性です。この欠陥は、Priority Inheritance PI処理中の誤ったウェイタークリーンアップに起因し、カーネルメモリの破壊、ローカル権限昇格、またはサービス拒否を引き起こす可能性があります。 📑 目次 概要 技術概要 根本原因 攻撃フロー 影響 影響を受けるバージ...
[SECURITY] [DSA 6527-1] rsync security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 28, 2026 https://www.debian.org/security/faq -...
EUVD-2026-88553
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97026 Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97026 Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97025
The Flatpak application is vulnerable to a local information disclosure flaw where it writes the OCI repository authentication token with world-readable permissions (0644 ) in the system-helper's cache directory. This allows other local users on a multi-user system to read the token and impersona...
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97025 Flatpak: flatpak: world-readable oci authentication token in system-helper cache path
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
EUVD-2026-88552
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-98018
A flaw was found in the Linux kernel. A race condition in the Management Component Transport Protocol MCTP I3C driver occurs when device discovery releases a lock prematurely while a bus is simultaneously removed. A local user could exploit this synchronization flaw to access freed memory,...
CVE-2026-97534
A flaw was found in the Linux kernel's Flash-Friendly File System F2FS. When segment ranges are truncated, the file system fails to properly adjust the free section counter for sections that were already marked free, leading to an overestimation of available storage during background garbage...
CVE-2026-97532
A flaw was found in the Linux kernel's qla2xxx storage driver. When memory allocation fails during device initialization, the driver's error-handling routine fails to clear pointers to memory that has already been released. A local user capable of triggering device initialization failures can cau...
zygote-CVE-2024-31317
Zygote工具包 - CVE-2024-31317 这是一个利用CVE-2024-31317通过ADB提取私有应用数据或使用应用UID生成Shell的工具包。该漏洞影响安全补丁级别为2024-06-01或更低的Android 9至14版本。下方可找到已测试设备支持矩阵。 先决条件 Debian/Ubuntu（系统包） sudo apt update sudo apt install adb openjdk-17-jdk-headless android-sdk android-sdk-build-tools export ANDROIDHOME=/usr/lib/android-sdk...