39990 matches found
UBUNTU-CVE-2026-80755
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count permread bounds a permission value by SELVECMAX but never by the nprim of the owning class or common, which is taken verbatim from the policy image...
CVE-2026-80757 selinux: reject a class permission count below its inherited common
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but classread takes that nprim verbatim...
CVE-2026-80757 selinux: reject a class permission count below its inherited common
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but classread takes that nprim verbatim...
CVE-2026-80757
CVE-2026-80757 is a vulnerability in the Linux kernel affecting the SELinux subsystem. The root cause is in security_get_permissions(), which maps an inherited common's permissions into an array sized by the class's own nprim field. However, class_read() takes nprim verbatim from the policy image...
CVE-2026-80756
This Linux kernel vulnerability affects the SELinux subsystem. When the first policy load fails during selinuxfs tree construction, sel_write_load() calls selinux_policy_cancel(), which dereferences a NULL state->policy pointer (no outgoing policy exists on the initial load). The bug is trigge...
CVE-2026-80756 selinux: do not cancel a policy conversion that never started
In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...
CVE-2026-80756 selinux: do not cancel a policy conversion that never started
In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...
CVE-2026-80755 selinux: reject a permission value exceeding the class permission count
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count permread bounds a permission value by SELVECMAX but never by the nprim of the owning class or common, which is taken verbatim from the policy image...
CVE-2026-14666
A flaw in PostgreSQL allows users to bypass row-level security RLS due to incomplete tracking of user role and database ownership changes. Active sessions may continue using cached, outdated security policies, enabling unauthorized read or write access to data. Exploitation requires the attacker ...
PT-2026-85233
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.82 Description A use of released resource issue in the mobile component allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering to entice...
Linux Distros Unpatched Vulnerability : CVE-2026-84355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web...
EUVD-2026-64014
Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/shell.py...
GHSA-7MQG-CX4G-X2RF Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
Reporter: Aaron / Aeon — autonomous security agent https://github.com/aaronjmars/aeon Project: omnigent-ai/omnigent v0.1.0 Databricks — meta-harness running Claude Code / Codex / Pi "in check with policies and sandboxing" Component: omnigent/policies/builtins/shell.py shared parser → consumed by...
EUVD-2026-62535
Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter CVE-2026-44738 bypass...
CVE-2026-84394
fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a closing bracket is neither validated as an IP literal nor canonicalized as a domain name, so parse returns it as the ho...
CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE
Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...
EUVD-2026-64758
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references...
EUVD-2026-64772
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization...