41471 matches found
EUVD-2026-58811
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
Linux Distros Unpatched Vulnerability : CVE-2026-72069
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the...
PT-2026-72258
In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rt spin unlock rt spin unlock releases the RCU protection before unlocking the lock. That opens the door for the following UAF scenario: T1 T2 spin lock&p-lock; rcu read lock;...
PT-2026-72834
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad failure when state is no longer POSTDAD addrconf dad failure transitions ifp-state from DAD to POSTDAD via addrconf dad end, which drops ifp-lock on return. The lock is re-acquired after net info...
Linux Distros Unpatched Vulnerability : CVE-2026-72390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schteql: Introduce slaveslock to avoid race condition and UAF The teql master-slaves singly linked list is not protected against multiple writes. It...
Linux Distros Unpatched Vulnerability : CVE-2026-72463
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb-dev refcnt until after transportfinish. However, xfrmrcvcb may modify skb-d...
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
CVE-2026-69414
Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.
MINI-JJ93-C5JQ-GVXC
Bulletin has no description...
GHSA-9HGC-G3W5-67CM ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability
WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...
PT-2026-72125
Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...
CVE-2026-58439
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58439
CVE-2026-58439 describes a branch protection bypass in go-gitea/gitea caused by PR retargeting that preserves a stale official approval flag. The vulnerability enables bypass of branch protection checks, with impact described as high (I) and high (A) in the CVSS metrics, and exploitation noted as...
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-63424
CVE-2026-63424 concerns Lenovo Dock Manager. A locally authenticated user can escalate privileges due to an improperly protected key. The CVSS data indicate a local attack with LOW privileges required and no user interaction, with high impact on integrity and availability, and low impact on confi...