ROS-20260113-7327

A vulnerability in the fs/f2fs/file.c component of the Linux operating system kernel is related to simultaneous execution using a shared resource with improper synchronization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-2695

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A race condition exists in Windows SMB Server due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to potentially...

PT-2026-2680

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A race condition exists within the Capability Access Management Service camsvc due to concurrent execution using a shared resource with improper...

PT-2026-2706

CVE-2026-20861 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/7rh4yHRbHT...

PT-2026-2686

Name of the Vulnerable Software and Affected Versions Graphics Kernel affected versions not specified Description A flaw exists that allows a local attacker to elevate privileges. This is due to a race condition occurring during concurrent execution when accessing a shared resource with improper...

PT-2026-2732

CVE-2026-20927 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to deny service over a… https://t.co/CyK7T10c3m...

Linux Distros Unpatched Vulnerability : CVE-2025-71072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures mapletree insertions can fail if we are seriously sho...

PT-2026-2736

CVE-2026-20934 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges … https://t.co/zKlEBGeVSJ...

PT-2026-2731

CVE-2026-20926 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges … https://t.co/V8g8uUheOy...

MiracleLinux 9 : kernel-5.14.0-611.5.1.el9_7 (AXSA:2025-11493:94)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11493:94 advisory. kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB...

PT-2026-2719

CVE-2026-20874 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/KTYAuV7eee...

PT-2026-2726

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A flaw in Windows SMB Server related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, could allow an authorized attacke...

PT-2026-2723

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A flaw exists in Windows Management Services that could allow an authorized attacker to elevate privileges locally due to a race condition during concurrent execution usin...

Malicious code in @workleap-ai/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2800f2cfba8ac6e7a16ef977484e4da4d360c859848daedb5220c7d3595653e1 The package @workleap-ai/shared was found to contain malicious code. Source: ghsa-malware...

MAL-2026-210 Malicious code in @workleap-ai/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2800f2cfba8ac6e7a16ef977484e4da4d360c859848daedb5220c7d3595653e1 The package @workleap-ai/shared was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-1986

Malicious code in @workleap-ai/shared npm...

ROS-20260112-7311

A vulnerability in the ipv4 components of the Linux operating system kernel is related to simultaneous execution using a shared resource with improper synchronization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2026-43719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the RDMA/rxe component. In the rxe srq from init function, the queue pointer q is assigned to srq-rq.queue before the SRQ number is copied to user space. If...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an IoT development framework from China Loxin Espressif. A security vulnerability exists in Espressif ESP-IDF versions prior to 1.1.0, which stems from a USB event callback and user code sharing state without locking, which could lead to a double release...

ROS-20260112-7373

A vulnerability in the drivers/net/ethernet/mellanox/mlx5 component of the Linux operating system kernel is related to simultaneous execution using a shared resource with improper synchronization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...