[SECURITY] Fedora 44 Update: syncthing-2.1.3-1.fc44

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

The vulnerability of the __kvm_apic_update_irr() function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the kvmapicupdateirr function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tmc_enable_etr_sink_sysfs() function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux operating system’s hardware tracing driver allows a hacker to cause a service failure.

The vulnerability of the tmcenableetrsinksysfs function in the drivers/hwtracing/coresight/coresight-tmc-etr.c file of the Linux kernel’s hardware tracing driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a servic...

CVE-2026-51744

Incorrect access control in the recvmeshinfosync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to force mesh configuration synchronization from an attacker-controlled host via sending a crafted MQTT message to the csbroker component...

CVE-2026-80715

A flaw was found in the Linux kernel's igc network driver. When an application using AFXDP, a high-performance network data path, is abruptly terminated, a synchronization issue can occur. This prevents the network interface from properly shutting down. A local attacker could exploit this to caus...

CVE-2026-51744

Incorrect access control in the recvmeshinfosync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to force mesh configuration synchronization from an attacker-controlled host via sending a crafted MQTT message to the csbroker component...

The vulnerability of the Windows operating system’s Telephony Service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

EUVD-2026-69209

Incorrect access control in the recvmeshinfosync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to force mesh configuration synchronization from an attacker-controlled host via sending a crafted MQTT message to the csbroker component...

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code.

The vulnerability of DNS servers for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-51673

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51673: Improper Access Control

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-14367: Concurrent Execution using Shared Resource with Improper Synchronization

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2026-58616

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

EUVD-2026-67847

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

CVE-2026-80715 igc: remove napi_synchronize() in igc_down()

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

CVE-2026-61800: Improper Limitation of a Pathname to a Restricted Directory

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to synchronization errors when using common resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...