7973 matches found
CVE-2026-89445
CVE-2026-89445 is a Use-After-Free in the Linux kernel 's iommufd selftest component. The TRIGGER_IOPF selftest borrows an attach handle from group->pasid_array without synchronizing against PASID detach, allowing a concurrent iommu_report_device_fault() to dereference a freed struct iommufd_a...
CVE-2026-89445 iommufd: Fix UAF in selftest IOPF reporting
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
CVE-2026-86781
creationtimestamp| type| source ---|---|--- 2026-09-11 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mva2bi7jx72x 2026-09-11 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117251232554267501 2026-09-11 08:10:57+00:00| seen|...
CVE-2026-81800
creationtimestamp| type| source ---|---|--- 2026-09-10 16:09:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6grufjks2j 2026-09-10 16:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6gtsiysc2t...
CVE-2026-17038
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038 Use of Hard-coded Credentials in drEryk Gabinet
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038 Use of Hard-coded Credentials in drEryk Gabinet
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
EUVD-2026-75403
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038
DrEryk Gabinet versions prior to 11.5.0 embed hard-coded API credentials within its ticket reporting component. An attacker who discovers these credentials can authenticate directly to the ticket system API, bypassing the application's normal access controls and performing privileged operations s...
CVE-2026-17038: Use of Hard-coded Credentials
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-87911
creationtimestamp| type| source ---|---|--- 2026-09-09 21:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723 2026-09-09 21:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp 2026-09-09 23:10:05+00:00| seen|...
[SECURITY] Fedora 44 Update: complyctl-1.0.0-1.fc44
complyctl fetches Gemara policies from OCI registries, resolves dependency graphs, dispatches scans to providers via gRPC, and produces compliance reports EvaluationLog, OSCAL, Markdown, SARIF. Providers are distributed separately via the complytime-providers package...
CVE-2026-83996
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69684
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-69612
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69513
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69482
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...