29788 matches found
CVE-2026-79675
creationtimestamp| type| source ---|---|--- 2026-08-25 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7qg74h2u 2026-08-25 18:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfz2x7pl2e 2026-08-25 22:40:04+00:00| seen|...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...
CVE-2026-74718
A flaw was found in the devlink component of the Linux kernel. When the devlinknlreloaddoit function is called, it may fail to release a network namespace reference under specific error conditions. This oversight occurs when the requested network namespace differs from the current one and the...
CVE-2026-78679
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...
CVE-2026-78679
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...
SUSE CVE-2026-68427
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1xboclearcachedmappings host1xbounpin drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cach...
SUSE CVE-2026-74432
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsgMSGPEEK Fix rxrpcrecvmsg to also drop the ref it holds on an already-released call if MSGPEEK is in force the function holds a ref on the call irrespective of whether MSGPEEK is specifie...
CVE-2026-79264: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
Linux kernel futex syscall Data Compromise
The vulnerability in the SYSCALLDEFINE4 function within the kernel/futex/syscalls.c module of the Linux operating system is related to errors occurring during reference count updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
PT-2026-81816
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An externally controlled reference in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-78679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option...
CVE-2026-79103: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78466: Undefined Security Weakness
The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...
CVE-2026-10630: Authorization Bypass Through User-Controlled Key
The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...
Linux kernel TCM Driver DoS
The vulnerability in the targetcoreitemdbrootstore function within the drivers/target/targetcoreconfigfs.c file of the Linux kernel TCM driver is related to a lack of a reference to an active descriptor or file index. Exploitation of this vulnerability may allow an attacker to cause a denial of...
PT-2026-81814
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect reference resolution in CustomTabs allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome ...
CVE-2026-78679: External Control of File Name or Path
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...
CVE-2026-79273: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78942: Use of Incorrectly-Resolved Name or Reference
Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...