CVE-2022-0847

CVE-2022-0847 Dirty Pipe Linux Kernel Privilege Escalation Analysis toc This article was first published on Huawei Security's official account, this is the blog version more complete First published link: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Vulnerability Introduction Vulnerability I...

CVE-2019-14079

USB-Geräte-Fuzzing auf Android CVE-2019-14079 Dieser Blogbeitrag handelt von einem einfachen Bug, den ich in meinem Android-Gerät MI A2 – läuft mit Stock-Android mittels USB-Geräte-Fuzzing gefunden habe und der von Google als hohes Risiko eingestuft wurde. Der Bug befand sich im...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

CVE-2026-78935 is a critical use-of-uninitialized-variable vulnerability in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the browser sandbox by convincing a user to load a crafted HTML...

EUVD-2026-65970

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-81547

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

cve-2021-43226PoC

Riproduzione di CVE-2021-43226 Ambiente Sistema operativo: Win10 20H2 su Hyper-V, build 19042.508. Trovato un sito https://os.click/en, le immagini Windows sono abbastanza complete e finora nessun backdoor rilevato. Poiché il PoC trovato è stato compilato con Visual Studio 2013, anch’io ho...

CVE-2026-64961 Authentication Bypass in ATutor

ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...

CVE-2026-76919

Wireshark is affected in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The ESS protocol dissector crashes due to a use of an uninitialized variable when processing malformed network traffic, enabling unauthenticated remote denial of service (CVSS 5.3). Exploitation in the wild is not documented in the p...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-74265

A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA GDMA queue, the queue-id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting th...

Linux Distros Unpatched Vulnerability : CVE-2026-74265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the...

The vulnerability of the act_skbedit.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the actskbedit.c component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

MINI-VC2H-Q35F-7F95

Bulletin has no description...

CVE-2026-72501

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...

UBUNTU-CVE-2026-72501

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...

CVE-2026-72501

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Initialize dpi variable to zero dpi is initialized only for BNXTREALLOCWCPAGE, but copied for all the cases. So initialize the dpi to 0...