kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine x86 shadow paging mechanism. This use-after-free vulnerability arises from incorrect handling of Guest Frame Numbers GFNs when guest page tables are modified. A local attacker with control over a guest virtual machine could...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-11966

creationtimestamp| type| source ---|---|--- 2026-07-17 08:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcjkfvu62x...

CVE-2026-59885

creationtimestamp| type| source ---|---|--- 2026-07-17 08:05:29+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc4kcbi523 2026-07-17 08:06:29+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6dlakl2h 2026-07-17 08:06:31+00:00| seen|...

CVE-2018-14816

creationtimestamp| type| source ---|---|--- 2026-07-17 07:00:04+00:00| seen| Telegram/pS736wy1q4JTpyQ27GThkrd-KM7MPYTW9rtTHg4MZzf-Jty 2026-07-18 00:00:37+00:00| seen| Telegram/pS736wy1q4JTpyQ27GThkrd-KM7MPYTW9rtTHg4MZzf-Jty...

CVE-2026-62764

creationtimestamp| type| source ---|---|--- 2026-07-17 06:34:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqt4zjdzoo2e 2026-07-17 14:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxfpq6gq2i...

CVE-2026-13402

CVE-2026-13402 affects the Royal Addons for Elementor WordPress plugin (before 1.7.1063). The vulnerability stems from the REST endpoints not checking the post status of menu items or the templates they reference, which allows unauthenticated users to retrieve rendered HTML content of private or ...

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-62208

OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's...

CVE-2026-44512 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-62318

creationtimestamp| type| source ---|---|--- 2026-07-17 02:01:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mqsnr6vyls2w...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the allowFrom feature of ClickClack. An attacker can gain unauthorized access to execute or persist actions beyond their intended authorization, including runni...

CVE-2026-62387

The Grav API plugin getgrav/grav-plugin-api before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: as its default CORS configuration on all responses, including authenticated endpoints and preflight OPTIONS responses. Because the plugin accepts credentials via the Authorization and X-API-Token...

CVE-2026-62386 Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter

The Grav API plugin getgrav/grav-plugin-api before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route JwtAuthenticator::extractBearerToken fallback. Because tokens are embedded in URLs, they are logged verbatim in web server access logs, leaked via th...

CVE-2026-62227

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked...

CVE-2026-62221 OpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFrom

OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization,...

CVE-2026-62219

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or...

EUVD-2026-45096

OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's...

CVE-2026-62826

creationtimestamp| type| source ---|---|--- 2026-07-17 00:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqshealkar2l 2026-07-17 14:00:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y...