5047 matches found
CVE-2026-128079
envd provides reproducible development environments for humans and agents. In versions starting with 0.3.38 and before 1.3.6, insufficient containment of host-side requirements-file reads in install.pythonpackagesrequirements=... could allow access to files outside the build context. An attacker...
WebKit-CVE-2016-4622
WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...
CVE-2026-129092
The CCC Attestation SIG attested-tls-poc (through commit 731ca82) contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability. The root cause is that Evidence is appraised only once during the TLS handshake without post-handshake re-attestation. This allows an attacker with local access to the at...
CVE-2026-95518
Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...
EUVD-2026-125284
Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...
CVE-2026-95518 TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer
Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...
CVE-2026-95518
A Time-of-check time-of-use (TOCTOU) race condition vulnerability exists in the Pardus Package Installer developed by TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü. The flaw affects versions from 0.7.0 before 0.7.1 . Attackers can leverage this race condition to achieve high impact con...
RLSA-2026:98599 Moderate: glibc security update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...
CVE-2026-126937
Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed X-Forwarded-F...
CVE-2026-126410
The wasmtime-wasi crate in Wasmtime versions 48.0.0 before 48.0.8 , 49.0.0 before 49.0.5 , and 50.0.0 before 50.0.1 is vulnerable to a time-of-check/time-of-use (TOCTOU) race condition. The flaw exists in the wasip3 wasi:sockets udp-socket host implementation, allowing a malicious guest to bypass...
EUVD-2026-125128
Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed X-Forwarded-F...
CVE-2026-126937 Zipline before 4.6.5 TOCTOU Race Condition via /api/setup
Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed X-Forwarded-F...
CVE-2026-126937
Zipline versions before 4.6.5 are vulnerable to a TOCTOU race condition in the POST /api/setup endpoint. This flaw allows unauthenticated attackers to create multiple SUPERADMIN accounts by sending concurrent requests before the firstSetup flag is reset. Attackers can exploit the argon2 hashing w...
CVE-2025-3464-AsIO3-LPE
CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Unprivileged LPE exploit for ASUS AsIO3.sys - TOCTOU auth bypass + PreviousMode decrement CVE-2025-3464: AsIO3.sys Local Privilege Escalation This exploit will only work on Windows 11 22H2 or earlier. Microsoft fixed PreviousMode hijinks. Local privilege...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit
CVE-2026-41651 — Pack2TheRoot: PackageKit D-Bus TOCTOU LPE |...
util-linux security, bug fix, and enhancement update
An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
RLSA-2026:97522 Important: util-linux security, bug fix, and enhancement update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fixes: util-linux: util-linux: heap use-after-free in libblkid nested partition...
CVE-2024-30088
CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG...