346 matches found
CVE-2026-70116
A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...
CVE-2026-70048
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The technical root cause is a memory management issue within the ReFS component. Information regarding specific affected versio...
CVE-2026-102227
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.
Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-109326
The Grav framework (versions before 2.1.7 ) is vulnerable to an information disclosure vulnerability due to insufficient configuration in bundled nginx, lighttpd, IIS, and Caddy 2 files. These configurations only block access to .git directories at the document root, allowing unauthenticated atta...
NPM: Nx: OS command injection via git revisions and remote refs
NPM: Nx: OS command injection via git revisions and remote refs vulnerability discovered by ? in WordPress Npm nx versions = 14.0.0, 22.7.8...
Nx: OS command injection via git revisions and remote refs
Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed an inode list leak during backref walking at resolveindirectrefs During backref walking, at resolveindirectrefs, if an error occurs, we jump to the ‘out’ label and call freeleaflist on the ‘parents’ ulist. This frees...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: Reinitialize the delayed ref list after deleting it from the list. In the insertdelayedref function, if we need to update the action of an existing ref to BTRFSDROPDELAYEDREF, we delete the ref from its refhead’s refaddlis...
Rocky Linux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...
AlmaLinux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...
CVE-2026-97922
In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or more times in one hist trigger leaks the variable reference and its strings when the trigger is removed. commit...
PT-2026-98586
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tracing component where using the same variable three or more times within a single histogram trigger causes a memory leak of the variable reference and its...
Linux Distros Unpatched Vulnerability : CVE-2026-90406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails...
PT-2026-94614
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In zoned file systems, the btrfs delayed refs rsv refill function returns -EAGAIN when the sum of over-committed metadata and zone unusable bytes exceeds the usable size in a metadata...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: Always report an error in runonedelayedref. Currently, we have a btrfsdebug function for handling failures in runonedelayedref. However, if end users encounter such problems, there will be no chance that btrfsdebug is...
CVE-2026-83999
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...