Linux Distros Unpatched Vulnerability : CVE-2026-66081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade...

CVE-2026-66081

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66081

A flaw exists in the Apache Thrift c_glib bindings (versions before 0.25.0 ) where the read_message_begin function leaves output parameters unset for non-versioned messages. This results in an Access of Uninitialized Pointer vulnerability. A remote, unauthenticated attacker can exploit this by se...

CVE-2026-66081 Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91588

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2022-21974

CVE-2022-21974：RMSRoamingSecurity 中未初始化指针释放导致远程代码执行 根本原因 RMSRoamingSecurity!ATL::CComCreator ::CreateInstance 构造函数分配并初始化了一个 CRmsRoamingSecurity 对象（0x3470 字节），但未能完全初始化其状态。 例如，在偏移量 0x3458 处有一个未初始化的指针，当析构函数被调用时（在 CRmsRoamingSecurity::Cleanup 中）会被释放： 0:000...

CVE-2022-21971

CVE-2022-21971: prauthproviders における未初期化ポインタの解放 根本原因 WapAuthProvider::CreateInstance コンストラクタは WapAuthProvider オブジェクト 0x78 バイト を割り当てて初期化しますが、その状態を完全には初期化できていません。 オフセット 0x50 のポインタは未初期化のままであり、デストラクタ WapAuthProvider::WapAuthProvider の呼び出し時に解放されます: prauthproviders!WapAuthProvider::WapAuthProvider+0x38...

CVE-2022-21971

CVE-2022-21971: prauthproviders における未初期化ポインタの解放 根本原因 WapAuthProvider::CreateInstance コンストラクタは WapAuthProvider オブジェクト 0x78 バイト を割り当てて初期化しますが、その状態を完全に初期化できません。 オフセット 0x50 のポインタは初期化されておらず、デストラクタが呼び出されたときに解放されます WapAuthProvider::WapAuthProvider 内: prauthproviders!WapAuthProvider::WapAuthProvider+0x38...

CVE-2022-21971-Windows-Runtime-RCE

CVE-2022-21971: prauthproviders における初期化されていないポインタの解放 根本原因 WapAuthProvider::CreateInstance コンストラクタは、WapAuthProvider オブジェクト 0x78 バイト を割り当てて初期化しますが、その状態を完全に初期化できません。 オフセット 0x50 のポインタは初期化されておらず、デストラクタが呼び出されたときに解放されます WapAuthProvider::WapAuthProvider 内:...

Rocky Linux 10.1 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc (crlsa-2025_23083)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523083 advisory. wireshark: Access of Uninitialized Pointer in Wireshark CVE-2025-13499 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc (crlsa-2022_8207)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228207 advisory. openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2025_2502)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20252502 advisory. X.Org: Xwayland: Use-after-free of the root cursor CVE-2025-26594 xorg: xwayland: Use-after-free in SyncInitTrigger CVE-2025-26601 xorg: xwayland:...

Rocky Linux 9 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc Multiple Vulnerabilities (crlsa-2023_6699)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20236699 advisory. krb5: Denial of service through freeing uninitialized pointer CVE-2023-36054 krb5: double-free in KDC TGS processing CVE-2023-39975 Tenable has extracted t...

Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2025_2500)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20252500 advisory. X.Org: Xwayland: Use-after-free of the root cursor CVE-2025-26594 xorg: xwayland: Use-after-free in SyncInitTrigger CVE-2025-26601 xorg: xwayland:...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1779978016)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1779978016 advisory. - NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists o...

Rocky Linux 9 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc (crlsa-2025_23142)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523142 advisory. wireshark: Access of Uninitialized Pointer in Wireshark CVE-2025-13499 Tenable has extracted the preceding description block directly from the CIQ security advisor...

CVE-2026-47528

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosur...

EUVD-2026-90103

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosur...