Lucene search
+L

1672 matches found

OSV
OSV
•added 2026/06/16 9:31 p.m.•27 views

GHSA-6JM4-83G2-35GV Duplicate Advisory: memory-wiki shared search could miss session visibility checks

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-72fw-cqh5-f324. This link is maintained to preserve external references. Original DescriptionOpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows...

6.5CVSS5.8AI score
SaveExploits0References4
NVD
NVD
•added 2026/06/16 7:17 p.m.•31 views

CVE-2026-53844

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that shoul...

6.5CVSS0.00361EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/16 6:04 p.m.•25 views

CVE-2026-53844 OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that shoul...

6CVSS6AI score
SaveExploits0References5
CVE
CVE
•added 2026/06/16 6:04 p.m.•77 views

CVE-2026-53844

OpenClaw vulnerability CVE-2026-53844 affects OpenClaw prior to version 2026.4.29, involving a session visibility check bypass in the shared memory search path. The issue enables authenticated callers to skip session visibility guards and access memory entries that should not be visible to their ...

6.5CVSS5.9AI score0.00361EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/16 6:04 p.m.•15 views

CVE-2026-53844 OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that shoul...

6.5CVSS5.9AI score0.00361EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/16 6:04 p.m.•48 views

CVE-2026-53844 OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that shoul...

6.5CVSS0.00361EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•35 views

PT-2026-49761

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.29 Description A session visibility check bypass exists in the shared memory search of the memory-wiki feature. This allows authenticated callers to skip session visibility guards on the search path, enabling...

6.5CVSS5.8AI score0.00361EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/16 12:00 a.m.•6 views

CVE-2026-53844: Missing Authorization

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that shoul...

6.5CVSS5.9AI score0.00361EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/06/15 8:35 a.m.•27 views

CVE-2026-48006

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the share...

8.7CVSS7AI score0.00849EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/06/13 12:34 a.m.•27 views

EUVD-2026-36606

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recover...

5.4AI score0.0014EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/10 10:16 p.m.•27 views

CVE-2022-26758

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4...

7.1CVSS0.00099EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/10 8:09 p.m.•14 views

CVE-2022-26758

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4...

6AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•43 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Monterey prior to 12.4 contained security vulnerabilities due to memory corruption issues, which could lead to unexpected changes in shared memory between processes...

7.1CVSS5.5AI score0.00099EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/09 5:33 p.m.•62 views

CVE-2026-0466

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service...

6.8CVSS0.00132EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/09 5:33 p.m.•51 views

CVE-2026-0466

CVE-2026-0466 involves AMD uProf with improper access control. A local user may write to the kernel-shared memory section, potentially causing a crash or denial of service. Documents reference AMD’s security bulletin AMD-SB-9025, but provide no version-specific details or remediation steps. No ex...

6.8CVSS5.8AI score0.00132EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/06/09 4:45 p.m.•22 views

CVE-2026-46330

A flaw was found in the Linux kernel's TCP User-Level Protocol ULP support for SMC. This vulnerability arises when an active TCP socket is converted into an SMC socket, as the implementation attempts to modify core Virtual File System VFS structures in-place. This action violates fundamental VFS...

7.8CVSS7.1AI score0.00165EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/09 2:16 p.m.•35 views

CVE-2026-46330

In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40. As reported by Al Viro, the TCP ULP support for SMC is fundamentally broken. The implementation attempts to convert an acti...

7.8CVSS0.00165EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•27 views

PT-2026-48128

Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description Improper access control in AMD uProf allows a local attacker with user privileges to write to the kernel-shared memory section. This issue involves a kernel write primitive in the...

6.8CVSS5.5AI score0.00132EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•43 views

AMD uProf 安全漏洞

AMD uProf is a cross-platform performance analysis tool developed by AMD, a company specializing in semiconductors. AMD uProf has a security vulnerability that stems from improper access control. This vulnerability could allow local attackers with user privileges to write to the kernel’s shared...

6.8CVSS5.4AI score0.00132EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•4 views

CVE-2026-0466: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service...

6.8CVSS5.8AI score0.00132EPSS
SaveExploits0References3
Rows per page
Query Builder