FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

EUVD-2026-94683

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

A path traversal vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 10.0.1 , specifically within the component handling USB storage operations . An authenticated user with USB management privileges can manipulate requested target paths to bypass intende...

CVE-2026-94580: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

PT-2026-107800

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

ROS-20261008-73-0241

The vulnerability of the cdns3gadgetinit function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to an incorrect definition of internal states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

EulerOS 2.0 SP15 : libusbx (EulerOS-SA-2026-3923)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

Linux Distros Unpatched Vulnerability : CVE-2026-106389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access...

CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39...

Unbreakable Enterprise kernel security update

5.15.0-325.220.5 - octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng Orabug: 39951718 - batman-adv: Remove stale reason member from batadvtpvars Vijayendra Suman Orabug: 39966037 - Revert 'octeontx2-pf: Fix leak of SQ timestamp buffer on teardown' Vijayendra Suman Orabug: 39967930 -...

ROS-20261007-73-0176

The vulnerability of the pnrxcomplete function in the drivers/usb/gadget/function/fphonet.c file of the Linux USB device driver module is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93693

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106389

Google Chrome versions prior to 155.0.8059.39 are vulnerable to incorrect authorization within the USB component. A remote attacker can leverage social engineering and a crafted Chrome extension to bypass system access restrictions. The vulnerability has a Chromium security severity of Medium . R...

CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...