186055 matches found
CVE-2026-97206 DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC DoQ lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the Do...
CVE-2026-97206
NLnet Labs Unbound versions 1.22.0 up to and including 1.26.1 are vulnerable to a DNS-over-QUIC (DoQ) lifetime bug . Under multi-threaded operation, a client-triggered QUIC path migration can trigger stream/connection cleanup while a mesh reply still holds a pointer to the DoQ stream. This result...
CVE-2026-97206
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC DoQ lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the Do...
CVE-2026-97206 DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC DoQ lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the Do...
BIT-MYSQL-CLIENT-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...
CLSA-2023-1693432495 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-4128 - net/sched: clsu32: No longer copy tcfresult on update to avoid use-after- free - net/sched: clsfw: No longer copy tcfresult on update to avoid use-after- free - net/sched: clsroute: No longer copy tcfresult on update to avoid use- after-free...
BIT-NGINX-GATEWAY-2026-97205 NGINX ngx_http_core_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processing a Server Side Includes SSI page containing “include virtual” commands may trigger a Use-After-Free UAF in the NGINX worker process...
BIT-NGINX-2026-97205 NGINX ngx_http_core_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processing a Server Side Includes SSI page containing “include virtual” commands may trigger a Use-After-Free UAF in the NGINX worker process...
BIT-MARIADB-MIN-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...
BIT-MARIADB-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...
Security update for openssh
This update for openssh fixes the following issues: CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...
CLSA-2026-1782151566 kernel: Fix of 37 CVEs
i40e: remove read access to debugfs files CVE-2025-39901 - e1000: fix OOB in e1000tbishouldaccept CVE-2025-71093 - ext4: fix bugon in estreesearch caused by bad boot loader inode CVE-2022-50638 - usbip: validate numberofpackets in usbippackretsubmit CVE-2026-31607 - md: fix resync softlockup when...
Exploit for CVE-2026-109618
php2shell-detect Defensive detection toolkit for php2shell...
CLSA-2025-1744624441 Fix of 56 CVEs
Ubuntu: 4.15.0-246.257 CVE-url: https://ubuntu.com/security/CVE-2025-21858 - geneve: Fix use-after-free in genevefinddev. CVE-url: https://ubuntu.com/security/CVE-2024-36921 - wifi: iwlwifi: mvm: guard against invalid STA ID on removal CVE-url: https://ubuntu.com/security/CVE-2023-52621 - bpf:...
CLSA-2024-1723622106 Fix of 29 CVEs
Ubuntu: 4.15.0-234.245 CVE-url: https://ubuntu.com/security/CVE-2024-42236 - usb: gadget: configfs: Prevent OOB read/write in usbstringcopy CVE-url: https://ubuntu.com/security/CVE-2024-41095 - drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgetldmodes CVE-url:...
CLSA-2024-1716270851 Fix of 48 CVEs
Ubuntu: 4.15.0-228.239 CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid...
K000163808: Next.js librsvg vulnerability CVE-2026-96889
Security Advisory Description A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still i...
Security update for python311
This update for python311 fixes the following issues: CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme bsc1276223. CVE-2026-17084: StringPrep...
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...
Security update for libpng16
This update for libpng16 fixes the following issues: CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: version update to 1.6.59 jscPED-16190: Fixed a regression introduced in version 1.6.47 that caused...