CVE-2026-76073

creationtimestamp| type| source ---|---|--- 2026-08-24 19:01:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyiqsg6x27 2026-08-25 05:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv4qclb4k2p...

CVE-2026-74710

A flaw was found in the Linux kernel's AFXDP eXpress Data Path component. This vulnerability arises because the AFXDP mechanism accepts a transmit TX metadata length that is smaller than required, allowing the kernel to read beyond its designated memory area. An attacker could potentially exploit...

CVE-2026-74709

A flaw was found in the Linux kernel's xsk AFXDP sockets component. A local attacker, by manipulating metadata flags after request processing, could cause the kernel to write a timestamp into the metadata area even when not explicitly requested. This could lead to unintended data modification...

CVE-2026-74707

A flaw was found in the Linux kernel's xsk AFXDP sockets component. This vulnerability allows a local user to bypass security validation by modifying transmission TX metadata after it has been initially checked but before it is used to prepare hardware requests. This could lead to unexpected syst...

Malicious code in paypal-business-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...

CVE-2026-66007

A flaw was found in datasets. This path traversal vulnerability allows a remote attacker to read arbitrary local files. By providing specially crafted file names in the metadata, an attacker can trick the system into including sensitive local files when datasets are saved or published, leading to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: btrfs: Zoned: Fixed a deadlock between metadata writeback and transaction commit. When writing out metadata extent buffers in a zoned filesystem, btreewritepages holds fsinfo-zonedmetaiolock throughout the entire writeback loop,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: actct: Preserve tcskbcb during defragmentation. tcfcthandlefragments calls nfcthandlefragments without saving and restoring skb-cb. The defragmentation helper clears IPCB/IP6CB, which aliases the tcskbcb/qdiscskbcb...

CVE-2026-75899

creationtimestamp| type| source ---|---|--- 2026-08-24 09:43:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtszcefdrc2b 2026-08-24 11:14:13+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtt6ezu55n25 2026-08-24 13:15:03+00:00| seen|...

CVE-2026-59561

creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:40+00:00| seen| https://jvn.jp/en/jp/JVN74538868 2026-08-27 00:47:17+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtzmqpm2ek2a...

Konami's Metal Gear Online 3 contains a heap-based buffer overflow

Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitrary code on lobby members' machines through specially crafted data. Description Metal Gear Online 3 i...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

SUSE CVE-2026-74597

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip6ip6err ip6ip6err clones an outer IPv6 ICMP error skb, pulls it to the quoted inner IPv6 packet, and then passes the clone to icmpv6send. The clone still carries the outer packet's inet6skbparm in...

SUSE CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

SUSE CVE-2026-74708

In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of struct xsktxmetadata. Reject the request when the registered metadata area does not contain the complete field. Snapshot the...

SUSE CVE-2026-74709

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

SUSE CVE-2026-74710

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the...

CVE-2026-74707

In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the descriptor context, then reads it again later when preparing the hardware request. User space can change the metadata...

CVE-2026-74708

In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of struct xsktxmetadata. Reject the request when the registered metadata area does not contain the complete field. Snapshot the...

CVE-2026-74709

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...