2922 matches found
SUSE CVE-2026-80663
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
Chromium: CVE-2026-78946 Incorrect authorization in Select
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-80663
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
UBUNTU-CVE-2026-80663
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
CVE-2026-80663
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
CVE-2026-80663 tools/power/x86/intel-speed-select: Harden daemon pidfile open
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
CVE-2026-80663
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
EUVD-2026-67539
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
CVE-2026-80663
CVE-2026-80663 affects the Linux kernel's tools/power/x86/intel-speed-select daemon. The vulnerability is a symlink-based pidfile clobbering flaw: the daemon uses a fixed pidfile path under /tmp and opens it without O_NOFOLLOW, allowing a local unprivileged user to pre-create a symlink at that pa...
CVE-2026-80663 tools/power/x86/intel-speed-select: Harden daemon pidfile open
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
CVE-2026-80663: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...
PT-2026-82963
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A local unprivileged user can exploit a symlink-based pidfile clobbering issue in the intel-speed-select daemon. Because the daemon uses a fixed pidfile path under /tmp, an attacker can...
CVE-2026-81728
Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...
WordPress WPC Name Your Price for WooCommerce plugin < 2.2.5 - Unauthenticated Price Manipulation via Select Mode vulnerability
Unauthenticated Price Manipulation via Select Mode vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WPC Name Your Price for WooCommerce versions 2.2.5...
EUVD-2026-66814
Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...
CVE-2026-81728: Improper Neutralization of Special Elements used in an SQL Command
Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...
CVE-2026-78946
A flaw was found in Google Chrome. This incorrect authorization vulnerability in the 'Select' component allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origi...
Linux Distros Unpatched Vulnerability : CVE-2026-78946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromiu...
CVE-2026-78946
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-78946
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...