Lucene search
+L
RedhatcveRecent

214747 matches found

RedhatCVE
RedhatCVE
•added 2026/09/15 7:22 p.m.•14 views

CVE-2026-80919

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could trigger a hung job, causing the amdgpudevcoredumpformat function to recursively acquire a lock. This recursive locking can lead to a self-deadlock, resulting in a Denial of Service DoS where the system becomes...

5.5CVSS5.6AI score0.00198EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•10 views

CVE-2026-91957

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. This use-after-free vulnerability exists in the smartcard RDPDR device handler. A remote attacker could exploit this by triggering a worker thread creation failure after device registration during channel setup...

3.1CVSS6.4AI score0.00347EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•10 views

CVE-2026-91961

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a Universal Serial Bus USB Redirection for Remote Desktop Connection URBDRC control-transfer request with an invalid OutputBufferSize. This can trigger an assertion in the client process, leading to a denial of...

7.1CVSS5.6AI score0.00371EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•15 views

CVE-2026-91962

A flaw was found in FreeRDP. An integer overflow in the audin Apple backends, specifically when processing FramesPerPacket values from MSGSNDINOPEN messages, allows a malicious RDP Remote Desktop Protocol server to supply crafted values. This can cause the AudioQueueAllocateBuffer size computatio...

6.3CVSS6.4AI score0.00261EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•10 views

CVE-2026-91960

A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the StreamEnsureRemainingCapacity function, leading to an integer wraparound and a...

7.1CVSS5.9AI score0.00438EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•11 views

CVE-2026-91959

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

7.1CVSS5.9AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•9 views

CVE-2026-91958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to trigger out-of-bounds memory access by crafting a malicious Remote Desktop Protocol RDP connection file. When a user opens this file, the FreeRDP client fails to properly validate array values, leading to a heap buffer...

6.9CVSS6.5AI score0.00152EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•10 views

CVE-2026-91956

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...

7.1CVSS5.7AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 6:09 p.m.•12 views

CVE-2026-90816

A flaw was found in FFmpeg. A CPU exhaustion issue can occur in the HLS protocol module when handling a specially crafted HLS HTTP Live Streaming playlist due to insufficient validation of duration or targetduration parameters. This vulnerability can lead to an excessive consumption of CPU...

5.5CVSS5.3AI score0.0058EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•8 views

CVE-2026-91954

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

7.1CVSS5.5AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•9 views

CVE-2026-91953

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

7.1CVSS6.3AI score0.00448EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•8 views

CVE-2026-91952

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted AVC444 graphics updates. This can cause the pooldecoderect function to enter an infinite loop when decoding AVC444 metablocks with an excessive number of region rectangles. The vulnerability lea...

7.1CVSS5.7AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•9 views

CVE-2026-91951

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a specially crafted USB redirection message to the urbdrc client channel. This can trigger an out-of-bounds write, leading to a denial of service DoS for the client when verbose asserts are enabled. Mitigation To...

7.1CVSS5.6AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•10 views

CVE-2026-91946

A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...

7.1CVSS5.8AI score0.00445EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•10 views

CVE-2026-91945

A flaw was found in FreeRDP. Authenticated RDP clients can exploit an out-of-bounds read vulnerability in smartcard response decoders. This occurs because the decoders fail to validate the length of Answer to Reset ATR fields against fixed inline arrays. By sending oversized ATR lengths, an...

7.1CVSS5.6AI score0.0053EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/09/15 5:59 p.m.•13 views

CVE-2026-90815

A flaw was found in FFmpeg. An out-of-bounds read can occur in the Convolution Filter when processing a specially crafted file due to insufficient bounds checks. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not process untrusted files using the...

7.5CVSS6.5AI score0.00422EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/09/15 5:55 p.m.•8 views

CVE-2026-91964

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

8.8CVSS6.3AI score0.00599EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:55 p.m.•10 views

CVE-2026-91963

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

8.8CVSS6.3AI score0.00601EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:39 p.m.•7 views

CVE-2026-91955

A flaw was found in FreeRDP. FreeRDP contains a flaw where it fails to validate client-supplied desktop dimensions during the Graphics Command Channel GCC negotiation. A remote attacker can exploit this by sending crafted Remote Desktop Protocol RDP packets with zero or oversized dimensions. This...

8.2CVSS5.8AI score0.00543EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:39 p.m.•9 views

CVE-2026-91950

A flaw was found in FreeRDP, where an out-of-bounds read vulnerability exists in the rdpdrdumppacket function. This is due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a specially crafted RDPDR packet, bypassing security checks and causi...

7.1CVSS5.9AI score0.0044EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:39 p.m.•6 views

CVE-2026-91948

A flaw was found in FreeRDP. An authenticated client can send specially crafted, oversized messages to the server when the CHANNELOPTIONSHOWPROTOCOL feature is active. This can cause a buffer underflow, leading to corruption of memory and potentially allowing an attacker to execute malicious code...

7.7CVSS6.4AI score0.0059EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/15 5:39 p.m.•8 views

CVE-2026-91947

A flaw was found in FreeRDP server. This use-after-free vulnerability exists in the DRDYNVC parser, where a channel pointer is dereferenced after its synchronization lock has been released. An authenticated client can exploit this by racing AUDIN channel closure messages against DRDYNVC data...

7.7CVSS6.3AI score0.00322EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 5:12 p.m.•9 views

CVE-2026-55774

A flaw was found in OpenBao, an open source identity-based secrets management system. An authenticated user with specific access to lease revocation functions could revoke a lease in a different namespace if the foreign lease identifier was known. This bypasses Access Control List ACL isolation,...

2.1CVSS5.6AI score0.00562EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 5:10 p.m.•8 views

CVE-2026-55776

A flaw was found in OpenBao. An authenticated user with write access to the transit secrets engine could trigger a server crash by creating a key with specific asymmetric key types and a 'derived' parameter set to true. This vulnerability, caused by a double-unlock of a mutex, leads to a denial o...

6.5CVSS5.6AI score0.00612EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 5:10 p.m.•8 views

CVE-2026-55775

A flaw was found in OpenBao, an identity-based secrets management system. An authenticated user with specific permissions on /sys/namespaces/root within a non-root namespace could exploit a vulnerability in the namespace path canonicalization process. This flaw allows the user to perform...

2.3CVSS5.7AI score0.00484EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 5:10 p.m.•8 views

CVE-2026-55701

A flaw was found in the OpenTelemetry Collector Contrib's githubreceiver component. An unauthenticated attacker can bypass authentication mechanisms, including required headers and HMAC validation, when the 'Secret' field is empty. This allows the attacker to submit arbitrary webhook payloads,...

6.9CVSS5.8AI score0.00701EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/09/15 5:10 p.m.•10 views

CVE-2026-55770

A flaw was found in OpenBao. When the LDAP authentication backend is configured, an attacker can manipulate a username with special characters to alter the LDAP search query. This allows the attacker to select a different directory entry, potentially gaining unauthorized access to secrets,...

6.8CVSS5.7AI score0.00525EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 4:33 p.m.•9 views

CVE-2026-91991

A flaw was found in Tornado. An attacker can bypass security validation in the setcookie function by using capitalized or legacy keyword arguments. This allows the attacker to inject arbitrary cookie attributes, such as Domain or SameSite, and modify cookie security settings. The consequence is t...

6.3CVSS5.8AI score0.00277EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 4:33 p.m.•11 views

CVE-2026-91986

A flaw was found in gix-transport. This vulnerability allows a remote attacker to inject control characters, specifically NUL, Carriage Return CR, and Line Feed LF bytes, into git-daemon connect requests by crafting malicious git URLs. This injection can lead to spoofing of virtual hosts or the...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 4:32 p.m.•9 views

CVE-2026-91990

A flaw was found in Tornado. This memory amplification vulnerability exists in the parsemultipartformdata function, where multipart data is processed before validating the maximum number of parts. A remote attacker can exploit this by sending specially crafted multipart requests with numerous...

8.7CVSS5.8AI score0.00488EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 4:11 p.m.•9 views

CVE-2026-91992

A flaw was found in Tornado's CurlAsyncHTTPClient. This vulnerability occurs because pycurl handles are reused across requests without proper state clearing. A remote attacker can exploit this by issuing requests through the same client instance, leading to the unintended persistence of sensitive...

8.2CVSS5.8AI score0.00262EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 4:11 p.m.•8 views

CVE-2026-85234

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

7.5CVSS5.6AI score0.00784EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/15 4:11 p.m.•7 views

CVE-2026-82677

A flaw was found in valkey-io valkey. A remote attacker could exploit a double free vulnerability in the moduleTimerHandler function within the Module Timer subsystem src/module.c. This flaw could lead to a denial of service. Mitigation Restrict access to high-privilege administrative users capab...

4.9CVSS5.4AI score0.00515EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2026/09/15 4:10 p.m.•8 views

CVE-2024-58384

A flaw was found in Tornado's CurlAsyncHTTPClient component. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the client fails to properly reject carriage return and line feed characters in HTTP request headers. A remote attacker can exploit this by injecting...

6.3CVSS6AI score0.00242EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 3:53 p.m.•7 views

CVE-2026-82631

A flaw was found in Valkey. A use-after-free vulnerability exists within the handleClientsBlockedOnKey function of the Blocked-on-keys Subsystem. A remote attacker could exploit this flaw, leading to a denial of service. The complexity of exploiting this vulnerability is high...

2.2CVSS5.7AI score0.00553EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2026/09/15 3:43 p.m.•6 views

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

4.4CVSS5.7AI score0.00173EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/15 3:40 p.m.•10 views

CVE-2026-79705

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...

4.5CVSS5.6AI score0.00379EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/15 3:38 p.m.•9 views

CVE-2026-45765

A flaw was found in Suricata. DNP3 reassembly could buffer data without sufficient parser-level bounds. A remote attacker sending crafted DNP3 traffic may cause Suricata to consume excessive memory, potentially resulting in a denial of service. Mitigation Disable DNP3 parsing in the Suricata...

7.5CVSS5.9AI score0.00616EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/15 3:38 p.m.•9 views

CVE-2026-45764

A type confusion flaw was found in Suricata's HTTP/2 protocol parsing engine. When processing network traffic, Suricata fails to properly validate protocol state transitions during HTTP/2 frame handling. A remote, unauthenticated attacker could exploit this vulnerability by transmitting specially...

9.1CVSS5.7AI score0.00633EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/15 3:08 p.m.•6 views

CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

7.3CVSS6AI score0.00221EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/15 2:12 p.m.•13 views

CVE-2026-55451

A flaw was found in gettext-converter. This vulnerability, known as prototype pollution, occurs in the js2i18next function when processing untrusted translation data. An attacker can craft malicious translation keys containing proto to modify the global Object.prototype. This can lead to a denial...

8.3CVSS5.6AI score0.00566EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/09/15 1:40 p.m.•12 views

CVE-2026-59230

A flaw was found in Apache Camel's camel-mail component. The MimeMultipart data format copies MIME headers from an incoming message onto the Camel message when unmarshalling with headersInline=true, without applying a HeaderFilterStrategy. An attacker who can provide a crafted MIME message may...

6.5CVSS5.6AI score0.00675EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/09/15 1:22 p.m.•10 views

CVE-2026-85595

An authentication bypass vulnerability was discovered in Traefik's digestAuth middleware. When an incoming request contains a username that does not exist in the configured authentication store, the application fails to reject the request and instead evaluates the credential against an empty stri...

9.8CVSS6AI score0.00692EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/09/15 12:48 p.m.•10 views

CVE-2026-85484

A flaw was found in HTML::FormHandler for Perl. This vulnerability allows a remote attacker to inject malicious script into web pages. The component fails to properly escape option group labels and radio button labels when rendering them into HTML. This can lead to Cross-Site Scripting XSS attack...

6.6AI score0.00327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 12:46 p.m.•11 views

CVE-2026-84968

A flaw was found in the MongoDB PHP driver. An unauthenticated attacker can exploit an out-of-bounds read vulnerability in the BSON decoding component by supplying specially crafted input. This can cause a small amount of adjacent process memory to be copied into an error message. Consequently,...

6.9CVSS5.6AI score0.0033EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 12:46 p.m.•14 views

CVE-2026-84308

A flaw was found in phpseclib, a PHP secure communications library. This vulnerability arises from non-constant-time X25519 scalar multiplication, where data-dependent conditional modular reductions create observable timing differences or variations in libgmp call counts. A local attacker, capabl...

6.3CVSS5.7AI score0.00327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 12:45 p.m.•8 views

CVE-2026-87500

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...

9.6CVSS6.7AI score0.00462EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/15 12:45 p.m.•9 views

CVE-2026-87494

A flaw was found in Google Chrome. This vulnerability, a use-after-free error, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user is tricked into visiting a specially crafted HTML page, typically through social engineering...

6.9AI score0.00462EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/15 12:45 p.m.•11 views

CVE-2026-85625

A flaw was found in sift sift.js. The component's handling of query keys allows for prototype pollution, where an attacker can modify the Object.prototype.$where property. This manipulation can lead to arbitrary code execution when benign filter calls are made or when an untrusted query object...

9.2CVSS6.1AI score0.00735EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/09/15 12:45 p.m.•10 views

CVE-2026-85485

A flaw was found in HTML::FormHandler for Perl. This vulnerability allows a remote attacker to inject malicious script code into web pages. The component fails to properly escape certain error messages when rendered into HTML. This can lead to a Cross-Site Scripting XSS vulnerability, enabling an...

6.4AI score0.00263EPSS
SaveExploits0References2
Total number of security vulnerabilities214747