214845 matches found
CVE-2026-74537
A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A race condition in the isoconnready function allows a socket to be prematurely freed while still in use. This Use-After-Free UAF vulnerability could lead to memory corruption, potentially causing a system crash or other unpredictabl...
CVE-2026-74467
A flaw was found in the s390/qeth component of the Linux kernel. An unprivileged local user could exploit this vulnerability by invoking specific SIOCDEVPRIVATE ioctl commands, such as SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE, and SIOCQETHQUERYOAT. These commands were not properly restricte...
CVE-2026-74574
A flaw was found in the Linux kernel's dmaengine IDXD subsystem. A race condition during file-device setup failure cleanup in the idxdcdevopen function could lead to a deadlock, causing a denial of service. Furthermore, incorrect cleanup paths could result in operations on a freed memory context,...
CVE-2026-53791
A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...
CVE-2026-74566
A flaw was found in the Linux kernel's keys subsystem. An inconsistency in how key descriptions are processed by the keyringgetkeychunk and keyringdiffobjects functions could allow a local attacker to create specially crafted key descriptions. These crafted descriptions might collide, potentially...
CVE-2026-74496
A flaw was found in the Linux kernel's Foo Over UDP FOU tunnel driver. An ordering issue in the foucreate function can lead to a use-after-free vulnerability. This occurs when a struct fou object is published before being fully added to the system's list. If the addition fails, the object can be...
CVE-2026-74452
A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...
CVE-2026-74510
A flaw was found in the Linux kernel's Bluetooth management mgmt component. A race condition exists during the cancellation of a pairing command and the handling of pairing completion or authentication failure callbacks. This race condition can lead to a use-after-free vulnerability, which may...
CVE-2026-74504
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer component. An unprivileged local user with access to ALSA timer and sequencer devices can trigger a division-by-zero error. This occurs by manipulating the ALSA timer's hardware resolution, leading to an integ...
CVE-2026-74530
A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, occurs when a connection is prematurely released while a related synchronization task in hciconnectbigsync is still running. This theoretical flaw could allow an attacker to cause a system crash...
CVE-2026-74550
A flaw was found in the kernel. When the network stack fails to allocate a peer entry, it can send un-rate-limited Internet Control Message Protocol ICMP or Neighbor Discovery NDISC Redirect messages. This can be exploited by a remote attacker to cause an uncontrolled flood of network traffic,...
CVE-2026-74509
A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...
CVE-2026-74476
A flaw was found in the veth component of the Linux kernel. This vulnerability occurs when a specially crafted network packet, known as a fraglist skb socket buffer, is processed by the veth driver. An attacker could potentially send such a packet, causing the system to misinterpret fragment...
CVE-2026-74531
A flaw was found in the Bluetooth hciconn component of the Linux kernel. A theoretical Use-After-Free UAF vulnerability exists if a connection conn is prematurely freed while the hcisync task is still active. This could potentially allow an attacker to cause a system crash or execute arbitrary co...
CVE-2026-74446
A flaw was found in the drm/amdkfd component of the Linux kernel. A race condition exists in the kfdcriucheckpointevents function where a mutex is not consistently held during event checkpointing. This allows a local attacker to cause memory corruption, potentially leading to privilege escalation...
CVE-2026-77682
A code injection vulnerability exists in Epiphany when the user invokes form autofill from the context menu on a page containing a malicious HTML form. In embed/web-process-extension/resources/js/ephyautofill.js, getSelector builds a CSS selector by directly interpolating an element's id attribut...
CVE-2026-66374
A flaw was found in Knot Resolver. This vulnerability, a heap-based buffer overflow, exists in the DNS-over-QUIC DoQ receive path. A remote attacker could exploit this flaw to achieve remote code execution, allowing them to run arbitrary commands on the affected system...
CVE-2026-39155
A flaw was found in Knot DNS. The mod-onlinesign component incorrectly computes the next NSEC Next Secure owner name. This can lead to an overly broad authenticated denial interval, allowing DNS Domain Name System resolvers that use aggressive negative caching to incorrectly generate negative...
CVE-2026-77648
A flaw was found in OpenStack Glance. A privileged administrator could exploit a vulnerability in the /v2/tasks API by crafting a specific import task. This action bypasses security filtering, enabling the administrator to perform Server-Side Request Forgery SSRF. As a result, an attacker could...
CVE-2026-73267
A flaw was found in the clusterclaims-controller component of multicluster engine MCE. A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the spec.namespace field. This allows the tenant to specify and delete any ManagedCluster, includi...
CVE-2026-74975
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...
CVE-2026-13789
An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=493847920...
CVE-2026-74982
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Widget component...
CVE-2026-74979
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Add-ons Manager component...
CVE-2026-74970
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...
CVE-2026-74961
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Side-channel in the Web Audio component...
CVE-2026-74958
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the WebRTC component...
CVE-2026-74952
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Application Update component...
CVE-2026-74954
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to side-channel in the Storage: Cache API component...
CVE-2026-74951
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in Firefox for Android...
CVE-2026-74980
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the Downloads component in Firefox for Android...
CVE-2026-74989
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these cou...
CVE-2026-75874
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...
CVE-2026-74439
A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...
CVE-2026-74438
A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...
CVE-2026-74436
A flaw was found in the Linux kernel. A synchronization issue in the rxrpc component, specifically between rxrpckernelchargeaccept and rxrpcdiscardprealloc, can lead to a use-after-free vulnerability. A local attacker could potentially exploit this flaw, causing a kernel preallocation worker to...
CVE-2026-74435
A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...
CVE-2026-74434
A flaw was found in the Linux kernel's rxrpc subsystem. When an out-of-band OOB message is read using the MSGPEEK flag in the rxrpcrecvmsgoob function, the message is incorrectly left on one queue while also being added to another. This can lead to the message being freed twice when the socket is...
CVE-2026-74432
A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg function is called with the MSGPEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Servic...
CVE-2026-74431
A flaw was found in the Linux kernel's rxrpc network protocol implementation. This vulnerability could allow an attacker to trigger an infinite loop within the rxrpcrecvmsg function by manipulating out-of-band OOB queue handling. This could lead to a Denial of Service DoS condition, making the...
CVE-2026-74430
A flaw was found in the Linux kernel's rxrpc component. A remote attacker could send a specially crafted ACKALL packet that bypasses state validation. This improper handling of forged packets can lead to a null-pointer dereference, causing a Denial of Service DoS by crashing the system...
CVE-2026-54464
A flaw was found in the websocket-driver library. When used with the permessage-deflate extension, a remote attacker can send compressed WebSocket messages that, upon decompression, exceed the configured maximum message size. This occurs because the size limit is checked against the compressed da...
CVE-2026-74950
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Downloads API component...
CVE-2026-74985
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Enterprise Policies component...
CVE-2026-74978
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the Widget component...
CVE-2026-74977
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...
CVE-2026-74429
A flaw was found in the Linux kernel's rxrpc component. This vulnerability occurs when the system receives a reply data packet before any request data packets have been sent on a client call. An attacker could potentially exploit this by sending a specially crafted reply packet, leading to a kern...
CVE-2026-74428
A flaw was found in the Linux kernel's rxrpc subsystem. A double unlock vulnerability in the rxrpcrecvmsg function, when processing out-of-band OOB messages, could allow a remote attacker to cause a system crash. This issue leads to a Denial of Service DoS condition...