336469 matches found
The vulnerability in the fs/ntfs3/fslog.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the fs/ntfs3/fslog.c component of the Linux operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100527)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100527 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count rmif3ainitialize takes the GPIO...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100495)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100495 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file nam...
ALSA-2026:55541 Important: nodejs22 security update
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
PT-2026-76851
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A memory corruption issue exists due to improper state management...
PT-2026-73404
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...
The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the apparmor component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the DRM/Atmel-HLCDC components in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rxe module in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the rxe module in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gpio_virtuser_device_config_group_release() function in the drivers/gpio/gpio-virtuser.c file of the Linux operating system’s GPIO driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gpiovirtuserdeviceconfiggrouprelease function in the drivers/gpio/gpio-virtuser.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the `drivers/media/i2c/tw9903.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rt9455_charger.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rt9455charger.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the gfs2 component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the do_trap_ecall_u() function in the arch/riscv/kernel/traps.c module of the module management subsystem for the RISCV-architecture Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dotrapecallu function in the arch/riscv/kernel/traps.c module of the Linux operating system’s RISCV architecture-based platform management subsystem is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker ...
MiracleLinux 8 : thunderbird-140.13.0-1.el8_10.ML.1 (AXSA:2026-1547:18)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1547:18 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...
Important: kernel6.18
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked...
Important: bind9.18 security update
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
PT-2026-76842
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...
Important: jackson-core
Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...