275609 matches found
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
DEBIAN-CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
UBUNTU-CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-43499-OnePlus15
CVE-2026-43499 — OnePlus 15 LPE PoC educativo ADVERTENCIA: Este repositorio se proporciona únicamente con fines educativos y de investigación. No se distribuyen binarios precompilados ni versiones. Debes compilar todo desde el código fuente. Escalación de privilegios local en Android 16 para...
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock La falla GhostLock de 15 años permite escalar a root y escapar de contenedores en la mayoría de las distribuciones de Linux GhostLock es una vulnerabilidad Use-After-Free UAF de alta gravedad en el subsistema rtmutex del kernel de Linux. La falla se origina en una...
[SECURITY] [DSA 6527-1] rsync security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 28, 2026 https://www.debian.org/security/faq -...
EUVD-2026-88553
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97026 Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97026 Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97025
The Flatpak application is vulnerable to a local information disclosure flaw where it writes the OCI repository authentication token with world-readable permissions (0644 ) in the system-helper's cache directory. This allows other local users on a multi-user system to read the token and impersona...
CVE-2026-97025 Flatpak: flatpak: world-readable oci authentication token in system-helper cache path
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
EUVD-2026-88552
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-98018
A flaw was found in the Linux kernel. A race condition in the Management Component Transport Protocol MCTP I3C driver occurs when device discovery releases a lock prematurely while a bus is simultaneously removed. A local user could exploit this synchronization flaw to access freed memory,...
CVE-2026-97534
A flaw was found in the Linux kernel's Flash-Friendly File System F2FS. When segment ranges are truncated, the file system fails to properly adjust the free section counter for sections that were already marked free, leading to an overestimation of available storage during background garbage...
CVE-2026-97532
A flaw was found in the Linux kernel's qla2xxx storage driver. When memory allocation fails during device initialization, the driver's error-handling routine fails to clear pointers to memory that has already been released. A local user capable of triggering device initialization failures can cau...