12854 matches found
CVE-2026-90199: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...
PT-2026-94668
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the ocfs2 validate xattr block function fails to verify that xh count and entry offsets for non-indexed blocks fit within the block. Additionall...
PT-2026-95130
Name of the Vulnerable Software and Affected Versions SigNoz versions 0.87.0 through 0.141.0 Description Authenticated users with a Viewer role or higher can perform SQL injection by providing specially crafted telemetry field-key names. The application fails to properly escape these names in the...
CVE-2026-90199: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mienumattr In mienumattr, the start/end VCN validation for non-resident attributes is: if svcn evcn + 1 goto out; When evcn is U64MAX the "evcn + 1" expression wraps to 0 and any svcn passes...
AlmaLinux 10 : microcode_ctl (ALSA-2026:67979)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
PT-2026-94843
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf arena free pages function where scalar arena addresses are processed by masking the address to the low 32 bits and reconstructing a full user address from the...
PT-2026-94974
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm/powerplay component where vddInd and vddcInd fields from VBIOS-parsed tables are used to index into voltage lookup tables without a proper bounds...
CVE-2026-92475
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
UBUNTU-CVE-2026-92475
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
CVE-2026-92475
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
CVE-2026-92475
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
EUVD-2026-81087
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
CVE-2026-92475 GPAC downloader.c wait_for_header_and_parse out-of-bounds
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
CVE-2026-92475
GPAC 26.08-DEV contains an out-of-bounds read vulnerability in the function wait_for_header_and_parse within the file src/utils/downloader.c. The flaw is triggered by manipulating the Content-Range argument, leading to an out-of-bounds memory read. Exploitation requires local access and low privi...
CVE-2026-92475 GPAC downloader.c wait_for_header_and_parse out-of-bounds
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...
GO-2026-6461 rclone local: crafted Range request against a translated symlink panics (DoS) in github.com/rclone/rclone
rclone local: crafted Range request against a translated symlink panics DoS in github.com/rclone/rclone...
AZL-101387 CVE-2026-89962 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Prevent kexec range truncation Sashiko AI review pointed out the following issue. The mergememoryranges function incorrectly handles overlapping memory ranges when merging them. Although sortmemoryranges sorts...
DEBIAN-CVE-2026-89962
In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Prevent kexec range truncation Sashiko AI review pointed out the following issue. The mergememoryranges function incorrectly handles overlapping memory ranges when merging them. Although sortmemoryranges sorts...
DEBIAN-CVE-2026-89911
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...
CVE-2026-89911
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...