Linux Distros Unpatched Vulnerability : CVE-2026-104043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a...

PT-2026-106289

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

perl-DBI security update

1.643-26.7 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271970...

Linux Distros Unpatched Vulnerability : CVE-2026-104029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to...

CVE-2026-14960-CVE-2026-14961

Vulnerabilidades de Escalada de Privilegios en el Controlador Pegatron TdeIo64 tdeio64.sys | ---|--- Identificadores CVE| CVE-2026-14960, CVE-2026-14961 Fabricante| Pegatron Corporation Producto| Controlador TdeIo tdeio64.sys Interfaz del Dispositivo| \.\TdeIo Tipos de Vulnerabilidad| Control de...

CVE-2022-3699

CVE-2022-3699 Exploit de prueba de concepto para CVE-2022-3699 Exploit probado en Windows 10 22H2 build 19045.4651 y build 19045.3803 La vulnerabilidad permite a usuarios sin privilegios acceder a funcionalidad que permite leer y escribir desde la memoria física desde la instancia del kernel; sin...

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

DEBIAN-CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

EUVD-2026-92764

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

CVE-2017-16995

Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto orientado principalmente a aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 contiene una vulnerabilida...

CVE-2024-2887

CVE-2024-2887 Esta es una breve descripción del CVE-2024-2887, que utilicé para reclamar V8CTF M123. Cuando se definen más tipos que kV8MaxWasmTypes, lo cual se puede lograr añadiendo más tipos en RecGroup, el índice de tipos puede superar los 20 bits y entonces desbordarse. De este modo, dos tip...

CVE-2025-24204

CVE-2025-24204 Acerca de CVE-2025-24204 es una vulnerabilidad que permite leer la memoria de cualquier proceso en sistemas macOS con SIP habilitado. La causa raíz de esta vulnerabilidad se debe a la adición de un entitlement excesivamente potente com.apple.system-task-ports.read al binario gcore...

dtrace-memaccess_cve-2020-27949

Lectura y escritura de memoria de otros procesos usando fasttrap El dispositivo /dev/fasttrap para crear nodos de trampa en procesos de espacio de usuario para los proveedores pid y objc tiene los permisos 666. En contraste con /dev/dtrace, que también es 666, fasttrap carece de una verificación ...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 87.0.4280.88, uninitialized use of V8 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of uninitialized resources in the GPU in Google Chrome prior to version 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox through a crafted HTML page. Chromium security severity: High...

CVE-2026-19185 Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19185 Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-19185

In Zephyr RTOS builds with CONFIG_USERSPACE, a vulnerability exists in the i3c_do_ccc() system call handler within drivers/i3c/i3c_handlers.c. The system-call verifier fails to validate per-target data buffers, allowing an unprivileged user-mode thread with I3C controller access to provide arbitr...