19605 matches found
CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25291
A Use After Free vulnerability exists in Graphics components due to a lack of proper synchronization mechanisms when performing concurrent operations on shared memory page lists . This memory corruption can lead to high confidentiality, integrity, and availability impacts. No specific software ve...
EUVD-2026-92975
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
USN-8873-1 unbound vulnerabilities
Yuqi Qiu and Xiang Li discovered that Unbound did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-81642 Ben Morris discovered that Unbound did not correctly handle certain memory operations...
[SECURITY] Fedora 45 Update: ocaml-zarith-1.14-15.fc45
This library implements arithmetic and logical operations over arbitrary-precision integers. The module is simply named "Z". Its interface is similar to that of the Int32, Int64 and Nativeint modules from the OCaml standard library, with some additional functions. See the file z.mlip for...
CVE-2026-104038
A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...
Linux Distros Unpatched Vulnerability : CVE-2026-98248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form th...
CVE-2026-106492: Improper Privilege Management
Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...
CVE-2026-25273: Out-of-bounds Write
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
Cross-Virtual-Fabric Context Switching and Horizontal Privilege Escalation in Brocade Fabric OS
: An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary...
NetScaler ADC and NetScaler Gateway DoS (CTX697174)
The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.28, or 14.1 prior to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.282, or 14.1-FIPS prior to 14.1-73.41. It is, therefore, affected by multiple vulnerabilities: - Citrix...
CVE-2026-98248: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form the LSE instruction. Without 'sfx', a W register argument will imply a...
PT-2026-106349
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when processing camera operations. This is caused by an out-of-bounds write, which happens during driver updates. An out-of-bounds write...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-106577
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the arm64 percpu implementation where the assembly for percpu name case sz and percpu name return case sz fails to use the sfx macro argument when forming the LSE Large...
Windows Hello Privilege Escalation
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Access Control Bypass vulnerability in the RBAC validation engine of Brocade Fabric OS
| Summary: An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permissi...
PT-2026-106780
Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-stripe versions prior to 3.90.0 @payloadcms/plugin-stripe versions prior to 4.0.0-canary.34 Description An authenticated user can perform unintended Stripe operations by accessing the enabled optional Stripe REST proxy. This...
CVE-2026-105848: Exposed Dangerous Method or Function
Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy can perform unintended Stripe operations. This issue is...
NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291 vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...