36043 matches found
SUSE CVE-2026-68326
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs that the firmware copies into the event: sinfo-assocreqies =...
Security Bulletin: Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem
Summary The voice mode subsystem src/backend/base/langflow/api/v1/voicemode.py contains two critical vulnerabilities that enable cross-tenant API key reuse and billing fraud. The first vulnerability involves a process-global ElevenLabs client singleton that caches the first user's API key and...
CVE-2026-66098
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow...
GO-2026-5075 Heimdall: IP Spoofing via Unvalidated Forwarding Headers in github.com/dadrus/heimdall
When the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded and X-Forwarded-For headers and exposes them as Request.ClientIPAddresses to the rule pipeline. However, extracted values are not validated to be syntactically valid IP addresses. Arbitrary...
CVE-2026-62917
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...
CVE-2026-68184
A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...
CVE-2026-62888
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-20778
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-56673
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
...
EUVD-2026-56638
Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...
CVE-2026-62774
Technical details are not publicly available in the provided documents for CVE-2026-62774. Monitor for updates on affected products, impact, and remediation.
CVE-2026-62772
The CVE-2026-62772 entry describes a heap-based buffer overflow in the Windows Container Isolation FS Filter Driver (unionfs.sys) that enables an authorized local attacker to elevate privileges. Affected component: Windows container isolation FS filter driver (unionfs.sys). Root cause: heap-based...
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability
...
CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...