CVE-2026-102760

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

CVE-2026-102757

A vulnerability in ThreadX allows an unprivileged, memory-protected module to gain privileged memory read and write access. The root cause is a flaw in the Module Manager , which incorrectly validates object addresses by only checking if they fall outside the module. An attacker can bypass this b...

CVE-2026-97610

A flaw was found in the Linux kernel's netfs network filesystem subsystem. A local user can cause a Denial of Service DoS or unexpected system behavior during synchronous unbuffered write operations on network filesystems, such as CIFS Common Internet File System. When an initial write preparatio...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the handling of SSLsetSSLCTX called mid handshake, which switches the context without refreshing the recorded certificate slot count, so a replacement context recognizing more provider signature algorithms indexes...

AZL-105825 CVE-2026-72897 affecting package rust 1.75.0-31

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

ALPINE-CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

AZL-105498 CVE-2026-72897 affecting package kata-containers 4.1.0.kata0-1

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

AZL-105588 CVE-2026-72897 affecting package openssl 3.3.7-6

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

AZL-105873 CVE-2026-72897 affecting package rust 1.96.1-2

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

AZL-105633 CVE-2026-72897 affecting package openvmm 0.1.0-1

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

DEBIAN-CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

AZL-105471 CVE-2026-72897 affecting package cloud-hypervisor 52.0.152-1

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

EUVD-2026-89019

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

CVE-2026-19743

The TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 are vulnerable to a Path Traversal flaw in the local IPC service. Due to improper path validation, a local authenticated user with low privileges can send crafted IPC commands to the service daemon to manipula...

CVE-2026-72897 Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

CVE-2026-72897 Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

EUVD-2026-89008

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

CVE-2026-72897

A flaw in OpenSSL allows a TLS server to perform an out-of-bounds read or fixed-value out-of-bounds write on the heap when using SSL_set_SSL_CTX() to switch contexts during a handshake. The root cause is that the internal array count for certificate validity flags is not refreshed when the connec...